last executing test programs: 1m32.731770683s ago: executing program 2 (id=314): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x12, 0x2001a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bd01000000000000003c5240f45f819e01177d3d458dd4992861ac000000000000000000000000004000", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) 1m32.635853703s ago: executing program 2 (id=317): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 1m31.507308321s ago: executing program 2 (id=322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) 1m31.473180041s ago: executing program 2 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 1m31.304015212s ago: executing program 2 (id=324): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$eJzs3c9vG1kdAPCv3fxw03SThT0sCNiyLBRU1U7c3Wi1B1guSGi1WqRlTwh1o8SNothxFDulCZFIJW5ckajECf4EDkgckHrizg1uXIoEUoGKqkFCyGjscZo4dhM1cdzGn4808ps3k/l+n6V5L37+8QIYWlciYicixiLi04iYSusz6Rbvt7bkvCePthd2H20vZKLR+PifI+mZ2wvt89supdfMRXyU7I93iVvb3FqZL5dL6+l+oV5ZK9Q2t64vV+aXSkul1WJxbnZu5t0b7xRPra1vVH7z8DvLH3zy+9998cEfd77x4yTnb7UOjSVtO7VA+7Sel9GY3FeXPHMf9CPYAFxI2zM26ER4LtmI+ExEvJmW9+QGlxMA0F+NxlQ0pvbv95Y5xjkAwIsvec0/GZlsPn39PxnZbD7fnMPLvRYT2XK1Vr92q7qxuhjNOazpGM3eWi6XZtK5wukYzST7s83y0/1ix/6NiHg1In4+frG5n1+olhcH9U8PAAy5Sx3j/+Px1vh/DN4hAICXmZEcAIbP4fF/dCB5AABnx+t/ABg++8b/bt/VBQDOoVzHd/8BgPPvyPn/1+MnPzybVACAM+L9fwAYKt/78MNka+ymv3+9eHtzY6V6+/piqbaSr2ws5Beq62v5pWp1qfmbPZWjrleuVtdm346NO4V6qVYv1Da3blaqG6v1m83f9b5Z8sUCABi8V9+4/+dMROy8d7G5RXstBx8IgHPPbQ7D68KgEwAGZmTQCQADYz4eyBxxvOdHhO71/puLJ8gH6L+rn+sx/9/tf4O7e6X/Nc4uRaBPzP/D8DrZ/L/ZA3iZmf+H4dVoZKznDwBD5hiv4H1EEM65537/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYZHPLZPPpWuCTkc3m8xGXI2I6RjO3lsulmYh4JSL+ND46nuzPDjppAOCEsn/PpOt/XZ16a7Lz6FjmP+PNx4j40S8//sWd+Xp9fTap/9deff1eWl/sGmC8/20AAPYZ6axoj9Ptcby9vu+TR9sL7e0sE3z47dbioknc3XRrp95KPhejETHx78yBxmROaWHinbsR8Xpn+7N7x6fTlU874yexL/ctfjRbOHkgfvZA/GzzWOsxeS4+ewq5wLC5n/Q/73e7/7JxpfmY3n+Zg51pLn52uHN9Du3+b7fR2f+17vePLueafU23/u/KcWO8/Yfv9jx290Lj8yMRu4f63/aK0LlmqVv8t7pd8KfffLzRUfWXL3zpzV7xG7+KuBrPit8qFeqVtUJtc+v6cmV+qbRUWi0W52bnZt698U6x0JyjLrRnqg/7x3vXXund/oiJHvFzR7T/q70u2uHX//30B19+Rvyvf6Vb/Gy89oz4yZj4tWPGn5/4bc/lu5P4iz3aP3Ig/tiBv0vqrh0z/oO/bi0e81QA4AzUNrdW5svl0rrCSQu5fl350gvSQIUehb99cuCeGng+p1IYWJcEnJGnN/2gMwEAAAAAAAAAAAAAAHqpfT/9yb8+fhlu0G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/Pp/AAAA///RQMtW") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1m30.07192268s ago: executing program 2 (id=331): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x4, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 1m30.057330791s ago: executing program 32 (id=331): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x4, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 1m19.994146708s ago: executing program 4 (id=403): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000003, &(0x7f0000000600), 0x41, 0x4f0, &(0x7f0000000680)="$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") 1m19.690568331s ago: executing program 4 (id=408): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='+pid'], 0x6) 1m19.571947572s ago: executing program 4 (id=410): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r0, 0x80045439, 0x20000000000409) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000187da4f7acf6c8345a02d4a0b703000006000000850000000488eccf92efa3f3c7d98cbace34952fb25478a22f04bb0c6fc026fdbb8a034a8cdae08772ed0062acaa0ac4", @ANYRESHEX, @ANYRES32, @ANYRES64=r0, @ANYRES8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_vhci(&(0x7f00000015c0)=ANY=[@ANYBLOB], 0x102) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 1m17.992457922s ago: executing program 4 (id=417): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000340)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x102e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@nojournal_checksum}]}, 0x3, 0x452, &(0x7f0000002080)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0/file0\x00', 0x200000, &(0x7f0000000280)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@oldalloc}, {@nojournal_checksum}, {@orlov}, {@debug}, {@data_err_abort}, {@nomblk_io_submit}, {@dioread_nolock}]}, 0x3, 0x570, &(0x7f0000000680)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$inet6(0xffffffffffffffff, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 1m16.383096863s ago: executing program 4 (id=429): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0x9}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m14.946003503s ago: executing program 4 (id=437): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) keyctl$join(0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000005c0)='\x00', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1m14.771504774s ago: executing program 33 (id=437): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) keyctl$join(0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000005c0)='\x00', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 23.316164862s ago: executing program 5 (id=825): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 22.343449068s ago: executing program 5 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 19.867746575s ago: executing program 5 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 18.084760507s ago: executing program 5 (id=848): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x3e, 0x17d, &(0x7f00000004c0)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) syz_clone(0xb00200, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_clone(0x1048000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) futex(0x0, 0xa, 0x0, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680)=0x1, 0x1) ptrace(0x4208, r6) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r5, 0x4}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/240, 0xf0, 0x0, &(0x7f00000005c0)=""/114, 0x72}, &(0x7f0000000180)=0x40) ptrace$getregset(0x4204, r6, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0x6, 0x1, 0xd4ba}}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) 15.950118602s ago: executing program 5 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) 14.6999929s ago: executing program 5 (id=857): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0x9}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14.522074721s ago: executing program 34 (id=857): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0x9}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.284598287s ago: executing program 3 (id=880): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000500)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@fat=@debug}, {@shortname_lower}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@gid}, {@fat=@showexec}, {@shortname_winnt}]}, 0x6, 0x2d8, &(0x7f0000001300)="$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") r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000200)=0xfffffffb, 0x4) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x80}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x2b, 0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x4, 0xffffffff, 0x8, 0x1089, 0xffffffffffffffff, 0x27, '\x00', r9, r5, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x0) 6.561043955s ago: executing program 3 (id=885): socket$packet(0x11, 0x2, 0x300) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r0, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 6.380902717s ago: executing program 6 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) 6.331958326s ago: executing program 3 (id=887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, 0x0, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e20, @broadcast}, 0x212, 0x0, 0x0, 0x0, 0xac6, &(0x7f0000000000)='veth1_to_team\x00', 0x40, 0x4, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x10000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00"/27, 0x1b) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4010}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 6.250392117s ago: executing program 3 (id=888): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)=ANY=[], 0x3c}, {&(0x7f0000000400)=ANY=[], 0x498}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) socket$can_raw(0x1d, 0x3, 0x1) 6.238206177s ago: executing program 6 (id=889): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800004, 0x810, r1, 0x43135000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={0x0}, 0x18) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) 4.053181592s ago: executing program 1 (id=892): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20, 0x76}, {0x20, 0x0, 0x0, 0x7ffff00c}, {0x6, 0x1e, 0x0, 0x3}]}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.975639373s ago: executing program 0 (id=893): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x4e, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) open_by_handle_at(r0, 0x0, 0x0) 3.885353963s ago: executing program 0 (id=894): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.714674364s ago: executing program 0 (id=895): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)=ANY=[], 0x3c}, {&(0x7f0000000400)=ANY=[], 0x498}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 3.387335397s ago: executing program 3 (id=896): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") 3.378413807s ago: executing program 6 (id=897): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, 0x0, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e20, @broadcast}, 0x212, 0x0, 0x0, 0x0, 0xac6, &(0x7f0000000000)='veth1_to_team\x00', 0x40, 0x4, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x10000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000000008000400", 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4010}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 3.340797707s ago: executing program 0 (id=898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) 3.340460047s ago: executing program 1 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=""/120, 0x78) 3.022129069s ago: executing program 6 (id=900): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3e, 0x17d, &(0x7f00000004c0)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 2.192601945s ago: executing program 0 (id=901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x569) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) 2.145876565s ago: executing program 1 (id=902): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 2.145385085s ago: executing program 1 (id=903): socket(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000001}) 1.151101232s ago: executing program 1 (id=904): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x4e, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[], 0x0) 717.246615ms ago: executing program 6 (id=905): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)=ANY=[], 0x3c}, {&(0x7f0000000400)=ANY=[], 0x498}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) socket$can_raw(0x1d, 0x3, 0x1) 278.974118ms ago: executing program 3 (id=906): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000003, &(0x7f0000000600), 0x41, 0x4f0, &(0x7f0000000680)="$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") 177.364149ms ago: executing program 1 (id=907): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)=ANY=[], 0x3c}, {&(0x7f0000000400)=ANY=[], 0x498}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 74.538089ms ago: executing program 6 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=909): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) kernel console output (not intermixed with test programs): slave_0) entered forwarding state [ 47.465005][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.476380][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.488182][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.491037][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.493495][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.495292][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.523170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.541567][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.544276][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.547281][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.550716][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.553063][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.555395][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.561324][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.564279][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.569124][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.582520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.585082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.587518][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.589695][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.603891][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.605909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.609442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.611963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.633038][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.635680][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.640148][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.643763][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.646096][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.647843][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.654486][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.671459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.699483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.702639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.705058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.714417][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.721735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.725036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.727894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.734060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.736718][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.742858][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.756581][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.762192][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.764953][ T546] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.766955][ T546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.785977][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.792940][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.795507][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.797896][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.803996][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.806577][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.810450][ T546] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.812416][ T546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.814610][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.817110][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.823908][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.837344][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.840421][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.843044][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.844891][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.847831][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.852944][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.855597][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.859025][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.861746][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.863539][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.877362][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.883699][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.886673][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.891741][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.894495][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.897064][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.901733][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.903871][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.917586][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.920996][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.923571][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.926432][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.930023][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.933397][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.937909][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.944149][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.950094][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.961615][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.964274][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.966896][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.970665][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.974199][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.990393][ T4029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.993713][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.996088][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.000571][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.003156][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.006163][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.010627][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.012546][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.031931][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.034331][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.037435][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.041687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.044320][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.046854][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.048965][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.053120][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.055937][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.062315][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.064922][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.071101][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.074989][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.083910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.113898][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.117891][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.126032][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.129462][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.133887][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.153392][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.155972][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.171310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.173854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.180946][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.183710][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.201563][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.210219][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.212234][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.227023][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.247099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.265002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.268772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.273219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.303122][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.305829][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.310428][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.313533][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.324331][ T4022] device veth0_vlan entered promiscuous mode [ 48.328922][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 48.330669][ T25] Bluetooth: hci1: command 0x041b tx timeout [ 48.332237][ T25] Bluetooth: hci2: command 0x041b tx timeout [ 48.343176][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.345718][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.348667][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.350661][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.361425][ T4023] device veth0_vlan entered promiscuous mode [ 48.367179][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.376850][ T4022] device veth1_vlan entered promiscuous mode [ 48.385639][ T4023] device veth1_vlan entered promiscuous mode [ 48.391558][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.394104][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.396686][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.398777][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.411273][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.417266][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.419995][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 48.422214][ T25] Bluetooth: hci4: command 0x041b tx timeout [ 48.424523][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.426947][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.430775][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.456175][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.459895][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.466982][ T4022] device veth0_macvtap entered promiscuous mode [ 48.472592][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.476576][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.480124][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.483421][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.494598][ T4022] device veth1_macvtap entered promiscuous mode [ 48.502242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.514958][ T4023] device veth0_macvtap entered promiscuous mode [ 48.521101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.523919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.538786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.541412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.543893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.546252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.550617][ T4023] device veth1_macvtap entered promiscuous mode [ 48.590825][ T4029] device veth0_vlan entered promiscuous mode [ 48.594763][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.597451][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.606546][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.615222][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.619472][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.622413][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.625217][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.629847][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.638038][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.641082][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.643797][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.646478][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.651353][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.655859][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.659433][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.663036][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.666580][ T4029] device veth1_vlan entered promiscuous mode [ 48.685510][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.688232][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.690891][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.695275][ T4022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.697720][ T4022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.701402][ T4022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.703686][ T4022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.711266][ T4023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.713556][ T4023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.715720][ T4023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.717894][ T4023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.735314][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.737869][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.744502][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.749620][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.752174][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.772431][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.774919][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.800521][ T4033] device veth0_vlan entered promiscuous mode [ 48.816564][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.821319][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.823928][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.826353][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.836085][ T4031] device veth0_vlan entered promiscuous mode [ 48.845016][ T4031] device veth1_vlan entered promiscuous mode [ 48.851290][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.853633][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.855976][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.889706][ T4033] device veth1_vlan entered promiscuous mode [ 48.893061][ T4029] device veth0_macvtap entered promiscuous mode [ 48.920454][ T4029] device veth1_macvtap entered promiscuous mode [ 48.961270][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.963899][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.964957][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.966554][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.967857][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.971508][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.974698][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.979911][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.982530][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.985173][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.990166][ T4033] device veth0_macvtap entered promiscuous mode [ 49.006303][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.016380][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.021048][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.023647][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.027463][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.031857][ T4033] device veth1_macvtap entered promiscuous mode [ 49.044839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.047400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.051948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.054655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.065053][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.068273][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.070814][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.073575][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.077276][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.083425][ T4029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.085623][ T4029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.087736][ T4029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.093187][ T4029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.104655][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.107420][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.114460][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.117249][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.121485][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.124162][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.126572][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.131358][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.135715][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.144051][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.146141][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.147848][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.151329][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.168371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.179009][ T4031] device veth0_macvtap entered promiscuous mode [ 49.187372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.193014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.195904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.200583][ T1631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.202644][ T1631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.203865][ T4031] device veth1_macvtap entered promiscuous mode [ 49.206866][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.210681][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.242205][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.244834][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.248759][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.252238][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.254892][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.257782][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.262152][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.264746][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.268888][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.275006][ T4033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.277243][ T4033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.280644][ T4033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.282988][ T4033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.299303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.301949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.304671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.308746][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.311725][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.314239][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.316827][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.320403][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.323182][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.325711][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.329669][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.333475][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.335426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.339514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.379550][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.390946][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.393515][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.396165][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.403093][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.405978][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.409859][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.412563][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.416393][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.446973][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.451185][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.490170][ T4031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.492554][ T4031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.494714][ T4031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.497082][ T4031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.563093][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.565204][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.574413][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.584786][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.586791][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.600228][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.697525][ T294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.699784][ T294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.702628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.784689][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.786862][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.792226][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.800327][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.815783][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.817160][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.819211][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.822271][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.825225][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.906221][ T4023] cgroup: fork rejected by pids controller in /syz2 [ 50.419545][ T25] Bluetooth: hci2: command 0x040f tx timeout [ 50.421499][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 50.423023][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 50.489082][ T3605] Bluetooth: hci4: command 0x040f tx timeout [ 50.490951][ T3605] Bluetooth: hci3: command 0x040f tx timeout [ 52.498969][ T4069] Bluetooth: hci0: command 0x0419 tx timeout [ 52.501390][ T4069] Bluetooth: hci2: command 0x0419 tx timeout [ 52.568787][ T4069] Bluetooth: hci3: command 0x0419 tx timeout [ 52.570713][ T4069] Bluetooth: hci4: command 0x0419 tx timeout [ 53.104172][ T4260] device syzkaller0 entered promiscuous mode [ 53.740989][ T4306] Zero length message leads to an empty skb [ 53.932361][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 54.794619][ T4312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.974059][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.976031][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.013197][ T4285] device bridge_slave_0 entered promiscuous mode [ 55.045440][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.075316][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.082716][ T4285] device bridge_slave_1 entered promiscuous mode [ 55.174978][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.195251][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.227451][ T4337] loop4: detected capacity change from 0 to 512 [ 55.268361][ T4285] team0: Port device team_slave_0 added [ 55.296894][ T4337] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.307862][ T4285] team0: Port device team_slave_1 added [ 55.310643][ T4337] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.364045][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.366259][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.458511][ T4337] EXT4-fs (loop4): 1 truncate cleaned up [ 55.460241][ T4337] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.515394][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.528309][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 55.536782][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 55.539797][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.197926][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.403163][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.404998][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.419682][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.641689][ T4285] device hsr_slave_0 entered promiscuous mode [ 56.699750][ T4285] device hsr_slave_1 entered promiscuous mode [ 56.748901][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.750914][ T4285] Cannot create hsr debugfs directory [ 56.756659][ T4352] device ipip0 entered promiscuous mode [ 57.768903][ T4034] Bluetooth: hci1: command 0x041b tx timeout [ 57.851439][ T4285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.034435][ T4285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.290869][ T4285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.484043][ T4285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.564812][ T4384] syz.0.119 uses obsolete (PF_INET,SOCK_PACKET) [ 58.590027][ T4374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.783683][ T4285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.830169][ T4285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.878149][ T4285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.941605][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 59.968235][ T4285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.035574][ T4394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'. [ 60.037937][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 60.040986][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 60.043847][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 60.085869][ T4401] device bond_slave_0 entered promiscuous mode [ 60.087745][ T4401] device bond_slave_1 entered promiscuous mode [ 60.095781][ T4401] device vlan2 entered promiscuous mode [ 60.165831][ T4401] device bond0 entered promiscuous mode [ 60.183815][ T4401] device bond0 left promiscuous mode [ 60.185504][ T4401] device bond_slave_0 left promiscuous mode [ 60.187096][ T4401] device bond_slave_1 left promiscuous mode [ 60.265430][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 60.270843][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 60.555032][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.571582][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.573987][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.590368][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.629448][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.632038][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.634572][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.636736][ T4081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.657535][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.668626][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.688931][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.691352][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.693129][ T4081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.699306][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 60.795821][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.800090][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.803363][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.808909][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.845264][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.859505][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.865690][ T4427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.900622][ T4285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.903264][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.919666][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.922086][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.924606][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.927174][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.933148][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.938951][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.970025][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.972558][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.008758][ T4144] Bluetooth: hci1: command 0x0419 tx timeout [ 62.028796][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.059570][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.062291][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.179346][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.196905][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.206932][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.223445][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.277043][ T4285] device veth0_vlan entered promiscuous mode [ 62.289332][ T4285] device veth1_vlan entered promiscuous mode [ 62.348678][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.351224][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.353760][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.357762][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.381084][ T4285] device veth0_macvtap entered promiscuous mode [ 62.385944][ T4285] device veth1_macvtap entered promiscuous mode [ 62.473658][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.476310][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.496219][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.503163][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.505626][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.528628][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.531536][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.534352][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.537345][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.544015][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.558308][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.561707][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.564219][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.566629][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.729222][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.445517][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.448240][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.450682][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.453312][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.455781][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.462499][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.464954][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.467562][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.483031][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.489966][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.492852][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.497358][ T4474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.511702][ T4285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.517521][ T4285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.522187][ T4285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.527933][ T4285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.703507][ T4449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.705784][ T4449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.717134][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.787889][ T4448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.793224][ T4448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.796280][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.968945][ T1631] device hsr_slave_0 left promiscuous mode [ 64.020495][ T1631] device hsr_slave_1 left promiscuous mode [ 64.098824][ T1631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.100799][ T1631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.139004][ T1631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.140925][ T1631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.152543][ T1631] device bridge_slave_1 left promiscuous mode [ 64.154538][ T1631] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.174423][ T1631] device bridge_slave_0 left promiscuous mode [ 64.176641][ T1631] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.357014][ T4511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.369564][ T1631] device veth1_macvtap left promiscuous mode [ 64.371429][ T1631] device veth0_macvtap left promiscuous mode [ 64.373035][ T1631] device veth1_vlan left promiscuous mode [ 64.374696][ T1631] device veth0_vlan left promiscuous mode [ 65.756460][ T1631] team0 (unregistering): Port device team_slave_1 removed [ 65.796898][ T1631] team0 (unregistering): Port device team_slave_0 removed [ 65.843614][ T1631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.924650][ T1631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.265124][ T1631] bond0 (unregistering): Released all slaves [ 66.304744][ T4526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.350232][ T4539] loop2: detected capacity change from 0 to 512 [ 66.380749][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 66.393229][ T4539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.419482][ T4539] EXT4-fs (loop2): 1 truncate cleaned up [ 66.422465][ T4539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.359464][ T4550] lo speed is unknown, defaulting to 1000 [ 67.361054][ T4550] lo speed is unknown, defaulting to 1000 [ 67.363672][ T4550] lo speed is unknown, defaulting to 1000 [ 67.415001][ T4550] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.420990][ T4550] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.493395][ T4550] lo speed is unknown, defaulting to 1000 [ 67.495666][ T4550] lo speed is unknown, defaulting to 1000 [ 67.505700][ T4550] lo speed is unknown, defaulting to 1000 [ 67.507820][ T4550] lo speed is unknown, defaulting to 1000 [ 67.523800][ T4550] lo speed is unknown, defaulting to 1000 [ 68.423500][ T4567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.182'. [ 68.476580][ T4574] netlink: zone id is out of range [ 68.609841][ T4578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 68.618142][ T4578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 68.622991][ T4578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 68.632176][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 68.836670][ T4584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.941777][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.943906][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.947158][ T1960] cfg80211: failed to load regulatory.db [ 71.026306][ T4608] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 71.085492][ T4610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.198'. [ 71.261995][ T4623] tipc: Started in network mode [ 71.267250][ T4623] tipc: Node identity 0e81fc877f9f, cluster identity 4711 [ 71.279854][ T4623] tipc: Enabled bearer , priority 0 [ 71.387781][ T4617] device syzkaller0 entered promiscuous mode [ 71.421167][ T4615] tipc: Resetting bearer [ 71.500350][ T4615] tipc: Disabling bearer [ 71.545468][ T4631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.206'. [ 71.694175][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 71.876082][ T4636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.286075][ T4656] can: request_module (can-proto-0) failed. [ 72.486288][ T4665] __sock_release: fasync list not empty! [ 72.616443][ T4673] netlink: 'syz.4.224': attribute type 6 has an invalid length. [ 73.961096][ T4691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.267662][ T4720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 74.283568][ T4720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.187683][ T4720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.267530][ T4746] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 75.283422][ T4746] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.253'. [ 76.368720][ T4764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.748515][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 76.766229][ T4785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.915308][ T4785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.199865][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 78.155495][ T4817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.161428][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.573012][ T4841] mac80211_hwsim hwsim12 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 78.588603][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 78.679470][ T4850] loop4: detected capacity change from 0 to 128 [ 78.727692][ T4855] loop1: detected capacity change from 0 to 128 [ 78.737431][ T4850] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 78.820035][ T4855] ======================================================= [ 78.820035][ T4855] WARNING: The mand mount option has been deprecated and [ 78.820035][ T4855] and is ignored by this kernel. Remove the mand [ 78.820035][ T4855] option from the mount to silence this warning. [ 78.820035][ T4855] ======================================================= [ 79.004848][ T4868] futex_wake_op: syz.0.300 tries to shift op by 32; fix this program [ 79.960838][ T4855] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.978802][ T4855] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 80.058953][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 80.061331][ T4879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.190533][ T4879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.339019][ T4883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.565509][ T4900] loop3: detected capacity change from 0 to 512 [ 80.630939][ T4900] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.632687][ T4900] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.652925][ T4900] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.310: bad orphan inode 131083 [ 80.665783][ T4900] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 80.781772][ T4909] loop1: detected capacity change from 0 to 16 [ 80.839263][ T4909] erofs: (device loop1): mounted with root inode @ nid 36. [ 80.872741][ T4915] loop3: detected capacity change from 0 to 1024 [ 80.929939][ T4917] loop4: detected capacity change from 0 to 512 [ 81.036850][ T4915] EXT4-fs (loop3): Ignoring removed nobh option [ 81.050636][ T294] wlan0: Trigger new scan to find an IBSS to join [ 81.067211][ T4915] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.313: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 81.078954][ T4917] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.621652][ T4923] ptrace attach of ""[4925] was attempted by "./syz-executor exec"[4923] [ 81.699531][ T4915] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.313: couldn't read orphan inode 11 (err -117) [ 81.809327][ T4915] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 81.868190][ T4854] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 81.896362][ T4917] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.318: invalid block [ 81.973730][ T4917] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.318: invalid indirect mapped block 4294967295 (level 1) [ 81.989634][ T4917] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.318: invalid indirect mapped block 4294967295 (level 1) [ 82.016380][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 82.047811][ T4917] EXT4-fs (loop4): 2 truncates cleaned up [ 82.057803][ T4917] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 82.481622][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 83.389863][ T4399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.409648][ T4952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.502527][ T4399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.515315][ T4968] udc-core: couldn't find an available UDC or it's busy [ 83.524707][ T4968] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.566876][ T4972] loop1: detected capacity change from 0 to 1764 [ 83.610649][ T4399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.647404][ T4399] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.668988][ T4972] process 'syz.1.335' launched './file0' with NULL argv: empty string added [ 83.788717][ T4989] udc-core: couldn't find an available UDC or it's busy [ 83.800890][ T4989] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.842785][ T4977] lo speed is unknown, defaulting to 1000 [ 83.906246][ T4991] loop0: detected capacity change from 0 to 128 [ 84.128229][ T4991] EXT4-fs (loop0): Test dummy encryption mode enabled [ 84.130993][ T4991] EXT4-fs (loop0): Test dummy encryption mode enabled [ 84.390038][ T4991] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 84.817968][ C1] sched: RT throttling activated [ 85.788710][ T4565] wlan0: Trigger new scan to find an IBSS to join [ 85.789746][ T1960] Bluetooth: hci1: command 0x0409 tx timeout [ 85.941021][ T4399] tipc: Left network mode [ 86.057548][ T4977] chnl_net:caif_netlink_parms(): no params data found [ 86.222066][ T5015] loop3: detected capacity change from 0 to 512 [ 86.280970][ T5015] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 86.283013][ T5015] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 86.359814][ T4977] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.371149][ T4977] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.386300][ T4977] device bridge_slave_0 entered promiscuous mode [ 86.434381][ T4977] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.436439][ T4977] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.440502][ T4977] device bridge_slave_1 entered promiscuous mode [ 86.504954][ T4977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.541578][ T4977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.646349][ T4977] team0: Port device team_slave_0 added [ 86.660514][ T4977] team0: Port device team_slave_1 added [ 86.709669][ T148] wlan0: Creating new IBSS network, BSSID 46:b2:2a:59:50:34 [ 86.806059][ T5039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.812631][ T4977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.815745][ T4977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.829231][ T4977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.863476][ T4977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.868104][ T4977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.878475][ T4977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.980183][ T4977] device hsr_slave_0 entered promiscuous mode [ 87.008775][ T4977] device hsr_slave_1 entered promiscuous mode [ 87.050562][ T4977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.052457][ T4977] Cannot create hsr debugfs directory [ 87.445534][ T4977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.481146][ T5083] loop1: detected capacity change from 0 to 16 [ 87.490698][ T4977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.532352][ T5083] erofs: (device loop1): mounted with root inode @ nid 36. [ 87.615938][ T4977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.667324][ T4977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.725134][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 87.841865][ T4399] device hsr_slave_0 left promiscuous mode [ 87.848481][ T4406] Bluetooth: hci1: command 0x041b tx timeout [ 87.890681][ T4399] device hsr_slave_1 left promiscuous mode [ 87.978693][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.980772][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.999363][ T4399] device bridge_slave_1 left promiscuous mode [ 88.001081][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.010031][ T5104] loop4: detected capacity change from 0 to 512 [ 88.066104][ T4399] device bridge_slave_0 left promiscuous mode [ 88.067791][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.087026][ T5104] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.188549][ T4399] device veth1_macvtap left promiscuous mode [ 88.190220][ T4399] device veth0_macvtap left promiscuous mode [ 88.191758][ T4399] device veth1_vlan left promiscuous mode [ 88.193247][ T4399] device veth0_vlan left promiscuous mode [ 88.808970][ T4399] team0 (unregistering): Port device team_slave_1 removed [ 88.839013][ T4399] team0 (unregistering): Port device team_slave_0 removed [ 88.880528][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.915878][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.059978][ T4399] bond0 (unregistering): Released all slaves [ 89.165128][ T5122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.172951][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 89.357765][ T4977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.388094][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.390552][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.405242][ T4977] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.421667][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.424289][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.426752][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.428628][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.449064][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.455259][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.459586][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.472497][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.474478][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.477472][ T5165] loop4: detected capacity change from 0 to 256 [ 89.495935][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.502729][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.505703][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.518791][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.539181][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.543548][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.550482][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.560463][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.565571][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.573794][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.577144][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.584594][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.938064][ T4128] Bluetooth: hci1: command 0x040f tx timeout [ 90.501994][ T5165] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 90.505964][ T5165] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 90.536956][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.542309][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.647868][ T4977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.670644][ T5183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 91.838194][ T4128] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.856264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.873384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.883710][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 91.917709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.923645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.930001][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.942484][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.969635][ T4977] device veth0_vlan entered promiscuous mode [ 92.008092][ T4406] Bluetooth: hci1: command 0x0419 tx timeout [ 92.032703][ T4977] device veth1_vlan entered promiscuous mode [ 92.099834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.102581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.105107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.128377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.142959][ T4977] device veth0_macvtap entered promiscuous mode [ 92.148301][ T4128] usb 1-1: Using ep0 maxpacket: 8 [ 92.155557][ T4977] device veth1_macvtap entered promiscuous mode [ 92.165520][ T5219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.317869][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.350507][ T5232] udc-core: couldn't find an available UDC or it's busy [ 92.352356][ T5232] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.357736][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.360899][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.363698][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.366196][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.368985][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.371432][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.374008][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.377844][ T4977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.610403][ T4128] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 92.818335][ T4128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.138230][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.140936][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.144538][ T4977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.149357][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.151957][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.168451][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.171203][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.173795][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.180297][ T4128] usb 1-1: config 0 descriptor?? [ 93.211391][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.271984][ T4977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.274242][ T4977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.276510][ T4977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.287521][ T4977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.388963][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.391275][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.395604][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.453182][ T4128] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 93.466068][ T294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.473777][ T294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.496023][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.587684][ T5248] loop4: detected capacity change from 0 to 512 [ 93.589117][ T5250] udc-core: couldn't find an available UDC or it's busy [ 93.592816][ T5250] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.671167][ T5248] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.674427][ T5248] EXT4-fs error (device loop4): ext4_find_extent:929: inode #4: comm syz.4.403: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 93.703006][ T5248] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 93.705546][ T5248] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 93.749441][ T5248] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 93.751305][ T5248] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.995276][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 93.997659][ T5260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.189199][ T5274] loop3: detected capacity change from 0 to 1024 [ 94.197628][ T5260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.398432][ T4128] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 95.401570][ T4128] asix: probe of 1-1:0.0 failed with error -71 [ 95.497722][ T4128] usb 1-1: USB disconnect, device number 2 [ 95.545941][ T5290] loop3: detected capacity change from 0 to 1024 [ 95.570527][ T5293] loop4: detected capacity change from 0 to 512 [ 95.638446][ T5293] EXT4-fs (loop4): Invalid want_extra_isize 4142 [ 95.700268][ T5290] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.726948][ T5290] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 95.783039][ T5304] loop0: detected capacity change from 0 to 1024 [ 95.814201][ T5293] loop4: detected capacity change from 0 to 1024 [ 95.825591][ T5307] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 95.874115][ T5304] EXT4-fs (loop0): Ignoring removed bh option [ 95.881249][ T5304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 95.905424][ T5304] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 2: comm syz.0.420: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.909697][ T5293] EXT4-fs (loop4): Ignoring removed oldalloc option [ 95.911428][ T5293] EXT4-fs (loop4): Ignoring removed orlov option [ 95.912986][ T5293] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 95.914754][ T5293] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.966485][ T5304] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 95.970744][ T5317] capability: warning: `syz.3.423' uses deprecated v2 capabilities in a way that may be insecure [ 95.995706][ T5304] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 48: comm syz.0.420: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.007600][ T5304] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 96.021378][ T5293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b842c018, mo2=0002] [ 96.023529][ T5293] System zones: 0-1, 3-12 [ 96.025293][ T5293] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000009,sysvgroups,oldalloc,nojournal_checksum,orlov,debug,data_err=abort,nomblk_io_submit,dioread_nolock,,errors=continue. Quota mode: none. [ 96.038320][ T5304] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.420: Failed to acquire dquot type 0 [ 96.042712][ T5304] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 96.068504][ T5304] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.420: mark_inode_dirty error [ 96.100836][ T5304] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 96.103657][ T5304] EXT4-fs (loop0): 1 orphan inode deleted [ 96.105433][ T5304] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,noblock_validity,debug,resgid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 96.121492][ T9] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.126386][ T9] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 96.129155][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6220: comm kworker/u4:0: Failed to release dquot type 0 [ 96.281479][ T5304] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz.0.420: Invalid inode table block 1 in block_group 0 [ 97.074242][ T5304] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 97.101247][ T5334] udc-core: couldn't find an available UDC or it's busy [ 97.103265][ T5334] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.115172][ T4029] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 97.127045][ T4029] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 97.152011][ T4029] EXT4-fs error (device loop0): ext4_quota_off:6486: inode #3: comm syz-executor: mark_inode_dirty error [ 97.434301][ T5343] udc-core: couldn't find an available UDC or it's busy [ 97.444568][ T5343] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.344012][ T5354] udc-core: couldn't find an available UDC or it's busy [ 98.345819][ T5354] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.827872][ T4399] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.912334][ T4399] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.935282][ T5381] loop0: detected capacity change from 0 to 512 [ 99.014451][ T4399] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.044590][ T5381] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.106529][ T4399] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.173050][ T5377] lo speed is unknown, defaulting to 1000 [ 99.312733][ T5413] loop0: detected capacity change from 0 to 1024 [ 99.426442][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.448'. [ 99.576122][ T5377] chnl_net:caif_netlink_parms(): no params data found [ 99.877169][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.909396][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.915826][ T5445] loop3: detected capacity change from 0 to 2048 [ 99.930558][ T5377] device bridge_slave_0 entered promiscuous mode [ 99.934440][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.936504][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.939014][ T5377] device bridge_slave_1 entered promiscuous mode [ 99.954988][ T5377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.959846][ T5377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.984776][ T5377] team0: Port device team_slave_0 added [ 99.988706][ T5377] team0: Port device team_slave_1 added [ 100.004071][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.006261][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.014774][ T5447] loop0: detected capacity change from 0 to 16 [ 100.045999][ T5377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.082215][ T5447] erofs: (device loop0): mounted with root inode @ nid 36. [ 100.114968][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.128468][ T5445] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 100.152347][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.180443][ T5445] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 100.215604][ T5377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.220162][ T5451] loop5: detected capacity change from 0 to 1024 [ 100.272622][ T5451] EXT4-fs (loop5): Ignoring removed nobh option [ 100.277688][ T5451] EXT4-fs (loop5): Ignoring removed bh option [ 100.284805][ T5451] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.360125][ T5451] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,journal_ioprio=0x0000000000000001,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,noblock_validity,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 100.447917][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.460'. [ 100.490088][ T5377] device hsr_slave_0 entered promiscuous mode [ 100.541060][ T5377] device hsr_slave_1 entered promiscuous mode [ 100.585228][ T5476] loop3: detected capacity change from 0 to 1024 [ 100.588278][ T5377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.590308][ T5377] Cannot create hsr debugfs directory [ 100.673882][ T5474] netlink: 'syz.1.463': attribute type 10 has an invalid length. [ 100.675929][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 100.742040][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 100.755486][ T5483] loop3: detected capacity change from 0 to 256 [ 100.874304][ T5483] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 100.893298][ T4406] Bluetooth: hci4: command 0x0409 tx timeout [ 101.036318][ T5496] loop3: detected capacity change from 0 to 1764 [ 101.140194][ T5501] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 101.147778][ T5377] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 101.246984][ T5377] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 101.290272][ T5377] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.565047][ T5377] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.363261][ T26] audit: type=1326 audit(102.340:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92bbed28 code=0x7fc00000 [ 102.402867][ T26] audit: type=1326 audit(102.380:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff92bbed28 code=0x7fc00000 [ 102.438953][ T26] audit: type=1326 audit(102.380:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92bbed28 code=0x7fc00000 [ 102.500175][ T5535] loop0: detected capacity change from 0 to 8 [ 102.501899][ T26] audit: type=1326 audit(102.380:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92bbed28 code=0x7fc00000 [ 102.507272][ T26] audit: type=1326 audit(102.380:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92bbed28 code=0x7fc00000 [ 102.580025][ T26] audit: type=1326 audit(102.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92bbed28 code=0x7fc00000 [ 102.609185][ T5541] syz.3.482 sent an empty control message without MSG_MORE. [ 102.626223][ T26] audit: type=1326 audit(102.380:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92bbed28 code=0x7fc00000 [ 102.646545][ T26] audit: type=1326 audit(102.380:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92bbed28 code=0x7fc00000 [ 102.663385][ T26] audit: type=1326 audit(102.380:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92bbed28 code=0x7fc00000 [ 102.684557][ T26] audit: type=1326 audit(102.380:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92bbed28 code=0x7fc00000 [ 102.699207][ T5550] loop3: detected capacity change from 0 to 128 [ 102.756550][ T5552] netlink: 136 bytes leftover after parsing attributes in process `syz.1.486'. [ 102.851013][ T5377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.872992][ T5550] loop3: detected capacity change from 0 to 2048 [ 102.936664][ T5550] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=4096, location=4096 [ 102.940868][ T5550] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 102.943474][ T5550] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 102.945981][ T5550] UDF-fs: Scanning with blocksize 512 failed [ 102.969055][ T4406] Bluetooth: hci4: command 0x041b tx timeout [ 102.971808][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.974289][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.980501][ T5377] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.989129][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.994677][ T5560] loop0: detected capacity change from 0 to 1024 [ 102.996974][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.015731][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.017698][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.022870][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.026100][ T5550] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 103.031650][ T5550] UDF-fs: Scanning with blocksize 1024 failed [ 103.035270][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.040780][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.042823][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.156715][ T5560] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.162295][ T5560] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 103.164794][ T5550] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 103.174138][ T4399] device hsr_slave_0 left promiscuous mode [ 103.179824][ T5550] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 103.181753][ T5550] UDF-fs: Scanning with blocksize 2048 failed [ 103.214103][ T5550] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 103.232414][ T4399] device hsr_slave_1 left promiscuous mode [ 103.242889][ T5550] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 104.009520][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.011496][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.019125][ T5550] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 104.021106][ T5550] UDF-fs: Scanning with blocksize 4096 failed [ 104.022609][ T5550] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 104.098130][ T4399] device bridge_slave_1 left promiscuous mode [ 104.100202][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.130774][ T4399] device bridge_slave_0 left promiscuous mode [ 104.132401][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.177234][ T5586] loop5: detected capacity change from 0 to 512 [ 104.209290][ T5589] loop0: detected capacity change from 0 to 128 [ 104.229610][ T5590] loop3: detected capacity change from 0 to 256 [ 104.278365][ T5586] EXT4-fs (loop5): Ignoring removed orlov option [ 104.283607][ T5589] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.290602][ T5590] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 104.308291][ T5590] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 104.318739][ T4399] device veth1_macvtap left promiscuous mode [ 104.320453][ T4399] device veth0_macvtap left promiscuous mode [ 104.324168][ T4399] device veth1_vlan left promiscuous mode [ 104.325725][ T4399] device veth0_vlan left promiscuous mode [ 104.360070][ T5586] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.495: inode #1: comm syz.5.495: iget: illegal inode # [ 104.388116][ T5586] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.495: error while reading EA inode 1 err=-117 [ 104.395794][ T5586] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.399309][ T5586] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.495: inode #1: comm syz.5.495: iget: illegal inode # [ 104.419229][ T5586] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.495: error while reading EA inode 1 err=-117 [ 104.422959][ T5586] EXT4-fs (loop5): 1 orphan inode deleted [ 104.424530][ T5586] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,orlov,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 104.596648][ T5600] loop3: detected capacity change from 0 to 512 [ 104.677938][ T5600] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.498: invalid block [ 104.695765][ T5600] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.498: invalid indirect mapped block 10 (level 1) [ 104.703695][ T5600] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.498: invalid indirect mapped block 8 (level 1) [ 104.714917][ T5600] EXT4-fs (loop3): 1 truncate cleaned up [ 104.716403][ T5600] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.107799][ T1534] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.477542][ T4068] Bluetooth: hci4: command 0x040f tx timeout [ 105.582997][ T4399] team0 (unregistering): Port device team_slave_1 removed [ 105.619178][ T4399] team0 (unregistering): Port device team_slave_0 removed [ 105.628288][ T1534] usb 1-1: Using ep0 maxpacket: 16 [ 105.666674][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.680986][ T5609] udc-core: couldn't find an available UDC or it's busy [ 105.682766][ T5609] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.727672][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.748272][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.751042][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.753659][ T1534] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.767203][ T1534] usb 1-1: New USB device found, idVendor=045e, idProduct=17f1, bcdDevice= 0.00 [ 105.773908][ T1534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.780078][ T1534] usb 1-1: config 0 descriptor?? [ 105.885583][ T4399] bond0 (unregistering): Released all slaves [ 105.983789][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.986397][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.002786][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.027142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.052643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.055519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.065126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.069805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.082856][ T5613] udc-core: couldn't find an available UDC or it's busy [ 106.083253][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.084905][ T5613] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.087374][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.111876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.113317][ T5613] udc-core: couldn't find an available UDC or it's busy [ 106.114571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.116169][ T5613] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.127203][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.236789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.249968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.270328][ T1534] hid-generic 0003:045E:17F1.0001: unknown main item tag 0x0 [ 106.272452][ T1534] hid-generic 0003:045E:17F1.0001: unknown main item tag 0x0 [ 106.274288][ T1534] hid-generic 0003:045E:17F1.0001: unknown main item tag 0x0 [ 106.276110][ T1534] hid-generic 0003:045E:17F1.0001: unknown main item tag 0x0 [ 106.277940][ T1534] hid-generic 0003:045E:17F1.0001: unknown main item tag 0x0 [ 106.287931][ T5377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.293069][ T1534] hid-generic 0003:045E:17F1.0001: unknown main item tag 0x0 [ 106.297595][ T1534] hid-generic 0003:045E:17F1.0001: unknown main item tag 0x0 [ 106.300789][ T1534] hid-generic 0003:045E:17F1.0001: unknown main item tag 0x0 [ 106.302664][ T1534] hid-generic 0003:045E:17F1.0001: unknown main item tag 0x0 [ 106.304547][ T1534] hid-generic 0003:045E:17F1.0001: unknown main item tag 0x0 [ 106.332817][ T1534] hid-generic 0003:045E:17F1.0001: hidraw0: USB HID v0.00 Device [HID 045e:17f1] on usb-dummy_hcd.0-1/input0 [ 106.359899][ T5629] udc-core: couldn't find an available UDC or it's busy [ 106.361731][ T5629] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.498286][ T4067] usb 1-1: USB disconnect, device number 3 [ 106.563802][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.566585][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.582689][ T5377] device veth0_vlan entered promiscuous mode [ 106.595215][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.600170][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.603129][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.605599][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.619643][ T5377] device veth1_vlan entered promiscuous mode [ 106.645558][ T5643] udc-core: couldn't find an available UDC or it's busy [ 106.647390][ T5643] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.669856][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.672493][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.674996][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.682517][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.692079][ T5377] device veth0_macvtap entered promiscuous mode [ 106.720516][ T5377] device veth1_macvtap entered promiscuous mode [ 106.747527][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.754778][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.757236][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.761505][ T5648] loop1: detected capacity change from 0 to 164 [ 106.763264][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.765956][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.769310][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.771804][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.774335][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.779555][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.784037][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.786780][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.793190][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.795802][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.806932][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.811698][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.819194][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.832502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.835237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.839824][ T5377] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.842170][ T5377] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.844317][ T5377] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.846462][ T5377] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.088715][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.090958][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.094573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.141569][ T4449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.143823][ T4449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.157621][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.365663][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 107.373786][ T4071] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 107.375914][ T4071] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x4 [ 107.377774][ T4071] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 107.428056][ T4071] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 107.430402][ T4071] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 107.438551][ T4071] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 107.440541][ T4071] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 107.462670][ T4071] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 107.472799][ T4071] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 107.474761][ T4071] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 107.483087][ T5687] loop1: detected capacity change from 0 to 512 [ 107.518483][ T4071] hid-generic 00A0:0008:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 107.529801][ T4406] Bluetooth: hci4: command 0x0419 tx timeout [ 107.552438][ T5687] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 107.618907][ T5687] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,stripe=0x00000000000000c4,dioread_nolock,mblk_io_submit,nogrpid,nodiscard,,errors=continue. Quota mode: none. [ 108.045820][ T5707] device ipip1 entered promiscuous mode [ 108.140127][ T5710] loop3: detected capacity change from 0 to 512 [ 108.317506][ T5710] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.524: corrupted inode contents [ 108.339244][ T5710] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #16: comm syz.3.524: mark_inode_dirty error [ 108.344681][ T5710] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.524: corrupted inode contents [ 108.369415][ T5710] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.524: mark_inode_dirty error [ 108.392026][ T5710] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.524: corrupted inode contents [ 108.409076][ T5710] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 108.415932][ T5710] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.524: corrupted inode contents [ 108.426899][ T5710] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.524: mark_inode_dirty error [ 108.448685][ T5710] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 108.463353][ T5710] EXT4-fs (loop3): 1 truncate cleaned up [ 108.464860][ T5710] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.628474][ T5738] loop0: detected capacity change from 0 to 512 [ 108.646268][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 108.754790][ T5738] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.529: corrupted inode contents [ 108.797622][ T5738] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #16: comm syz.0.529: mark_inode_dirty error [ 108.804981][ T5755] udc-core: couldn't find an available UDC or it's busy [ 108.806766][ T5755] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 108.817223][ T5738] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.529: corrupted inode contents [ 108.842192][ T5738] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.529: mark_inode_dirty error [ 108.943498][ T5738] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.529: corrupted inode contents [ 108.958151][ T5738] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 108.969035][ T5738] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.529: corrupted inode contents [ 108.984542][ T5738] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.529: mark_inode_dirty error [ 109.014823][ T5738] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 109.032448][ T5738] EXT4-fs (loop0): 1 truncate cleaned up [ 109.033956][ T5738] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.153413][ T5781] loop6: detected capacity change from 0 to 128 [ 110.178159][ T4406] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.241573][ T5785] loop3: detected capacity change from 0 to 2048 [ 110.356041][ T5785] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.558359][ T4406] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.560929][ T4406] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.577508][ T5803] udc-core: couldn't find an available UDC or it's busy [ 110.590734][ T5803] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.600555][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.543'. [ 110.603049][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.667134][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.730108][ T5811] loop5: detected capacity change from 0 to 1024 [ 110.738316][ T4406] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 110.740770][ T4406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.745109][ T4406] usb 1-1: Product: syz [ 110.747451][ T4406] usb 1-1: Manufacturer: syz [ 110.751025][ T4406] usb 1-1: SerialNumber: syz [ 110.759918][ T4406] usb 1-1: config 0 descriptor?? [ 110.955912][ T5825] loop6: detected capacity change from 0 to 164 [ 111.024578][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 111.027834][ T5830] loop5: detected capacity change from 0 to 1024 [ 111.040915][ T4406] usb 1-1: USB disconnect, device number 4 [ 111.076499][ T5830] EXT2-fs (loop5): error: couldn't mount because of unsupported optional features (1c2c0) [ 111.118881][ T5825] blk_update_request: I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.130197][ T5825] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32 [ 111.149783][ T5839] loop1: detected capacity change from 0 to 512 [ 111.220626][ T5839] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.551: invalid block [ 111.226884][ T5839] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.551: invalid indirect mapped block 10 (level 1) [ 111.255729][ T5839] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.551: invalid indirect mapped block 8 (level 1) [ 111.272365][ T5839] EXT4-fs (loop1): 1 truncate cleaned up [ 111.280928][ T5839] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.385806][ T5851] loop3: detected capacity change from 0 to 512 [ 111.416980][ T5851] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 111.453652][ T5851] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,stripe=0x00000000000000c4,dioread_nolock,mblk_io_submit,nogrpid,nodiscard,,errors=continue. Quota mode: none. [ 111.742012][ T5875] netlink: 'syz.0.561': attribute type 4 has an invalid length. [ 111.795773][ T4066] lo speed is unknown, defaulting to 1000 [ 111.807165][ T5875] netlink: 'syz.0.561': attribute type 4 has an invalid length. [ 111.821762][ T4406] lo speed is unknown, defaulting to 1000 [ 111.847808][ T5869] loop6: detected capacity change from 0 to 8192 [ 111.934178][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 111.976980][ T5887] loop5: detected capacity change from 0 to 512 [ 112.031007][ T5869] VFS: Lookup of 'file0' in vfat loop6 would have caused loop [ 112.099497][ T5893] loop3: detected capacity change from 0 to 164 [ 112.161040][ T5887] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 112.539663][ T5921] loop6: detected capacity change from 0 to 512 [ 112.591766][ T5921] EXT4-fs (loop6): Ignoring removed orlov option [ 112.593592][ T5921] EXT4-fs (loop6): Ignoring removed bh option [ 112.605386][ T5921] EXT4-fs (loop6): 1 truncate cleaned up [ 112.607015][ T5921] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,norecovery,orlov,nodioread_nolock,bh,lazytime,,errors=continue. Quota mode: none. [ 112.641001][ T5928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.641351][ T5921] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.573: invalid indirect mapped block 234881024 (level 0) [ 112.651084][ T5921] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.573: invalid indirect mapped block 16744704 (level 1) [ 112.866601][ T5944] loop0: detected capacity change from 0 to 164 [ 112.907505][ T5931] loop5: detected capacity change from 0 to 2048 [ 112.981306][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 113.117616][ T5931] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.373298][ T5931] fs-verity: sha512 using implementation "sha512-arm64" [ 114.626598][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'. [ 114.630179][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 114.636165][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 114.643429][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 114.695018][ T5984] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 115.002541][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.596'. [ 115.004911][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.202926][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.296799][ T6017] udc-core: couldn't find an available UDC or it's busy [ 116.307548][ T6017] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 116.374188][ T6015] loop6: detected capacity change from 0 to 2048 [ 116.461384][ T6015] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.743579][ T6047] loop5: detected capacity change from 0 to 1024 [ 116.745940][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.610'. [ 116.894588][ T6047] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.878039][ T6069] device ipip0 entered promiscuous mode [ 117.984741][ T6076] loop6: detected capacity change from 0 to 1024 [ 118.046086][ T6076] EXT4-fs (loop6): Ignoring removed nobh option [ 118.047777][ T6076] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.162938][ T6089] loop3: detected capacity change from 0 to 1024 [ 118.208092][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.263562][ T6076] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,nobh,min_batch_time=0x0000000000000001,nojournal_checksum,barrier,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,nogrpid,barrier=0x0000000000000007,delalloc,. Quota mode: none. [ 119.128164][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 119.176192][ T6100] syz_tun: refused to change device tx_queue_len [ 119.248307][ T7] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 119.250499][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.253026][ T7] usb 1-1: config 0 has no interface number 0 [ 119.428397][ T7] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 119.430889][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.433110][ T7] usb 1-1: Product: syz [ 119.434353][ T7] usb 1-1: Manufacturer: syz [ 119.436812][ T7] usb 1-1: SerialNumber: syz [ 119.447452][ T7] usb 1-1: config 0 descriptor?? [ 119.728366][ T7] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 119.730040][ T7] usb 1-1: No valid video chain found. [ 119.744270][ T7] usb 1-1: USB disconnect, device number 5 [ 121.363858][ T6140] device ipip0 entered promiscuous mode [ 121.409294][ T6147] udc-core: couldn't find an available UDC or it's busy [ 121.411487][ T6147] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.571016][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 121.690771][ T6169] loop0: detected capacity change from 0 to 2048 [ 121.763550][ T6169] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.815485][ T6178] udc-core: couldn't find an available UDC or it's busy [ 121.817265][ T6178] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.871862][ T6180] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 122.083408][ T6192] device pim6reg1 entered promiscuous mode [ 123.149775][ T6206] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 123.260909][ T6227] loop6: detected capacity change from 0 to 164 [ 123.277844][ T6225] loop0: detected capacity change from 0 to 1024 [ 123.385066][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 123.399991][ T6234] udc-core: couldn't find an available UDC or it's busy [ 123.407023][ T6234] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.453676][ T6225] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 123.544592][ T6246] udc-core: couldn't find an available UDC or it's busy [ 123.546374][ T6246] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 124.109728][ T6269] loop0: detected capacity change from 0 to 256 [ 124.327692][ T6274] loop1: detected capacity change from 0 to 1024 [ 124.395627][ T6279] loop0: detected capacity change from 0 to 1024 [ 124.472751][ T6274] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.538354][ T6279] EXT4-fs (loop0): Ignoring removed nobh option [ 124.540058][ T6279] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.561480][ T6279] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nobh,min_batch_time=0x0000000000000001,nojournal_checksum,barrier,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,nogrpid,barrier=0x0000000000000007,delalloc,. Quota mode: none. [ 125.456893][ T6307] loop6: detected capacity change from 0 to 164 [ 125.605010][ T6321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.703734][ T6326] udc-core: couldn't find an available UDC or it's busy [ 125.705519][ T6326] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.715558][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.665'. [ 125.727664][ T6328] loop3: detected capacity change from 0 to 164 [ 126.209294][ T6355] loop1: detected capacity change from 0 to 8 [ 128.536996][ T6380] loop0: detected capacity change from 0 to 164 [ 128.653900][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 128.841985][ T6403] loop1: detected capacity change from 0 to 16 [ 128.871537][ T6403] erofs: (device loop1): mounted with root inode @ nid 36. [ 128.876090][ T6403] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 128.892109][ T6403] attempt to access beyond end of device [ 128.892109][ T6403] loop1: rw=0, want=15300821032, limit=16 [ 128.895122][ T6403] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 129.023080][ T6416] loop1: detected capacity change from 0 to 512 [ 129.052696][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.698'. [ 129.055283][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.698'. [ 129.062321][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.698'. [ 129.069033][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 129.106658][ T6416] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.696: corrupted in-inode xattr [ 129.115879][ T6416] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.696: couldn't read orphan inode 15 (err -117) [ 129.134325][ T6416] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.346474][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 129.355622][ T6430] loop1: detected capacity change from 0 to 1024 [ 129.415610][ T6432] loop3: detected capacity change from 0 to 164 [ 129.432923][ T6430] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 129.444699][ T6430] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 129.447609][ T6430] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.454003][ T6430] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.700: Inode bitmap for bg 0 marked uninitialized [ 129.466766][ T6430] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 129.494030][ T6430] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.700: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 129.598481][ T6438] loop0: detected capacity change from 0 to 2048 [ 129.742031][ T6438] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 129.786713][ T6446] loop1: detected capacity change from 0 to 16 [ 129.818652][ T6449] loop3: detected capacity change from 0 to 512 [ 130.641171][ T6446] erofs: (device loop1): mounted with root inode @ nid 36. [ 130.652568][ T6449] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 130.881705][ T6478] loop3: detected capacity change from 0 to 164 [ 130.884605][ T6480] loop6: detected capacity change from 0 to 256 [ 130.951107][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 130.974117][ T6487] ptrace attach of "./syz-executor exec"[6488] was attempted by "./syz-executor exec"[6487] [ 131.050843][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.052487][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.312518][ T6503] loop1: detected capacity change from 0 to 1024 [ 131.591247][ T6503] EXT4-fs (loop1): Ignoring removed nobh option [ 131.594209][ T6503] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.200077][ T6503] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,usrjquota=,nobarrier,dioread_lock,norecovery,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,delalloc,bsdgroups,dioread_nolock,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 132.486545][ T6529] loop5: detected capacity change from 0 to 1024 [ 132.500922][ T6531] loop3: detected capacity change from 0 to 256 [ 132.680455][ T6529] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.199184][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 133.258885][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'. [ 135.232182][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 136.372781][ T6609] loop0: detected capacity change from 0 to 512 [ 136.514456][ T6609] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.836390][ T6642] loop6: detected capacity change from 0 to 128 [ 137.908131][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 137.992860][ T6642] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.374072][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 138.523991][ T6662] loop0: detected capacity change from 0 to 2048 [ 138.731826][ T6676] loop3: detected capacity change from 0 to 512 [ 139.525672][ T6662] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.663243][ T6676] EXT4-fs (loop3): 1 orphan inode deleted [ 139.676603][ T6676] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.368692][ T6741] loop1: detected capacity change from 0 to 2048 [ 142.123709][ T6741] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.186449][ T6749] loop3: detected capacity change from 0 to 2048 [ 142.241604][ T6749] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 142.751800][ T6782] loop0: detected capacity change from 0 to 1024 [ 144.386572][ T6792] loop1: detected capacity change from 0 to 1024 [ 144.419178][ T6782] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,errors=remount-ro,discard,lazytime,data_err=ignore,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 144.775697][ T6800] loop5: detected capacity change from 0 to 2048 [ 144.910083][ T6800] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.395514][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 146.311965][ T6848] loop3: detected capacity change from 0 to 1024 [ 147.061438][ T6848] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,errors=remount-ro,discard,lazytime,data_err=ignore,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 148.406127][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.817'. [ 150.176575][ T6911] udc-core: couldn't find an available UDC or it's busy [ 150.185043][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 150.212859][ T6911] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 150.520613][ T6930] loop1: detected capacity change from 0 to 2048 [ 150.661415][ T6930] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.836729][ T6945] loop1: detected capacity change from 0 to 256 [ 151.096468][ T6958] loop6: detected capacity change from 0 to 16 [ 151.158406][ T6958] erofs: (device loop6): mounted with root inode @ nid 36. [ 151.757907][ T6971] ptrace attach of "./syz-executor exec"[6973] was attempted by "./syz-executor exec"[6971] [ 154.777025][ T7000] loop6: detected capacity change from 0 to 512 [ 154.801019][ T7000] EXT4-fs (loop6): Test dummy encryption mode enabled [ 154.820623][ T7000] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 154.872375][ T6992] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 154.892875][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 154.906872][ T7000] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.841: bad orphan inode 131083 [ 154.910253][ T7000] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 155.419181][ T7028] loop1: detected capacity change from 0 to 1024 [ 156.194666][ T7032] loop5: detected capacity change from 0 to 16 [ 156.269721][ T7032] erofs: (device loop5): mounted with root inode @ nid 36. [ 156.325835][ T7028] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,errors=remount-ro,discard,lazytime,data_err=ignore,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 157.300896][ T7042] ptrace attach of "./syz-executor exec"[7048] was attempted by "./syz-executor exec"[7042] [ 157.355506][ T7051] loop6: detected capacity change from 0 to 1024 [ 157.392310][ T7051] EXT4-fs (loop6): Ignoring removed nobh option [ 157.434616][ T7051] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.849: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 157.501634][ T7051] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.849: couldn't read orphan inode 11 (err -117) [ 157.531119][ T7051] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 157.758083][ T7039] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 159.137774][ T7091] loop1: detected capacity change from 0 to 128 [ 160.316116][ T7091] EXT4-fs (loop1): Test dummy encryption mode enabled [ 160.318190][ T7091] EXT4-fs (loop1): Test dummy encryption mode enabled [ 160.348273][ T4444] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.568212][ T7091] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 161.512552][ T7099] loop6: detected capacity change from 0 to 256 [ 161.619987][ T4444] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.797020][ T4444] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.937916][ T4444] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.265771][ T7120] loop0: detected capacity change from 0 to 16 [ 162.473780][ T7103] lo speed is unknown, defaulting to 1000 [ 162.497347][ T7120] erofs: (device loop0): mounted with root inode @ nid 36. [ 162.686387][ T7103] chnl_net:caif_netlink_parms(): no params data found [ 163.541491][ T7133] ptrace attach of "./syz-executor exec"[7139] was attempted by "./syz-executor exec"[7133] [ 163.675985][ T7143] loop3: detected capacity change from 0 to 2048 [ 163.805132][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.825209][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.841492][ T7103] device bridge_slave_0 entered promiscuous mode [ 163.848231][ T4406] Bluetooth: hci1: command 0x0409 tx timeout [ 163.880823][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.888568][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.896453][ T7103] device bridge_slave_1 entered promiscuous mode [ 163.898983][ T7143] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.954800][ T7103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.965099][ T7103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.068359][ T7103] team0: Port device team_slave_0 added [ 164.071882][ T7103] team0: Port device team_slave_1 added [ 164.090621][ T7166] loop6: detected capacity change from 0 to 1024 [ 164.140127][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.141936][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.166156][ T7103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.197745][ T7166] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,errors=remount-ro,discard,lazytime,data_err=ignore,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 164.239520][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.241501][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.385104][ T7182] loop3: detected capacity change from 0 to 128 [ 164.439559][ T7182] EXT4-fs (loop3): Test dummy encryption mode enabled [ 164.441529][ T7182] EXT4-fs (loop3): Test dummy encryption mode enabled [ 164.550687][ T7103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.767474][ T7182] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 166.101223][ T3605] Bluetooth: hci1: command 0x041b tx timeout [ 166.440225][ T7103] device hsr_slave_0 entered promiscuous mode [ 166.489887][ T7103] device hsr_slave_1 entered promiscuous mode [ 166.516236][ T7194] loop0: detected capacity change from 0 to 256 [ 166.528979][ T7103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.530945][ T7103] Cannot create hsr debugfs directory [ 167.144043][ T7103] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 167.205493][ T7103] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 167.260801][ T7103] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 167.343753][ T7103] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 167.493195][ T4444] device hsr_slave_0 left promiscuous mode [ 167.636564][ T4444] device hsr_slave_1 left promiscuous mode [ 167.800600][ T4444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.806100][ T4444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.235181][ T4444] device bridge_slave_1 left promiscuous mode [ 168.236858][ T4444] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.236958][ T3605] Bluetooth: hci1: command 0x040f tx timeout [ 168.302516][ T7227] loop0: detected capacity change from 0 to 16 [ 168.314728][ T4444] device bridge_slave_0 left promiscuous mode [ 168.316454][ T4444] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.328376][ T7227] erofs: (device loop0): mounted with root inode @ nid 36. [ 168.560287][ T4444] device veth1_macvtap left promiscuous mode [ 168.562014][ T4444] device veth0_macvtap left promiscuous mode [ 168.563899][ T4444] device veth1_vlan left promiscuous mode [ 168.565601][ T4444] device veth0_vlan left promiscuous mode [ 169.339767][ T4128] Bluetooth: hci2: command 0x0406 tx timeout [ 169.341390][ T4128] Bluetooth: hci3: command 0x0406 tx timeout [ 169.342963][ T4128] Bluetooth: hci0: command 0x0406 tx timeout [ 169.521100][ T7235] loop0: detected capacity change from 0 to 256 [ 169.702603][ T4444] team0 (unregistering): Port device team_slave_1 removed [ 169.713451][ T4444] team0 (unregistering): Port device team_slave_0 removed [ 169.726870][ T4444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.786452][ T4444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.906932][ T4444] bond0 (unregistering): Released all slaves [ 170.286601][ T7250] loop3: detected capacity change from 0 to 128 [ 170.544975][ T7250] EXT4-fs (loop3): Test dummy encryption mode enabled [ 170.547426][ T7250] EXT4-fs (loop3): Test dummy encryption mode enabled [ 170.811851][ T7250] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 171.157221][ T7103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.205165][ T7255] loop6: detected capacity change from 0 to 16 [ 171.236303][ T7103] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.298632][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.301386][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.309697][ T4406] Bluetooth: hci1: command 0x0419 tx timeout [ 171.316427][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.319627][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.341072][ T7255] erofs: (device loop6): mounted with root inode @ nid 36. [ 171.359129][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.361181][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.375975][ T7269] loop1: detected capacity change from 0 to 256 [ 172.758178][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.760684][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.763191][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.765534][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.767315][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.773470][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.196125][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.199959][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.203229][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.205890][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.229977][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.263281][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.276867][ T7284] loop3: detected capacity change from 0 to 512 [ 173.289829][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.300753][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.303359][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.318414][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.344333][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.398913][ T7284] EXT4-fs (loop3): orphan cleanup on readonly fs [ 173.404278][ T7284] EXT4-fs error (device loop3): ext4_find_extent:929: inode #4: comm syz.3.906: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 173.440593][ T7288] [ 173.441212][ T7288] ====================================================== [ 173.443013][ T7288] WARNING: possible circular locking dependency detected [ 173.444845][ T7288] 5.15.178-syzkaller #0 Not tainted [ 173.446132][ T7288] ------------------------------------------------------ [ 173.447948][ T7288] syz.1.907/7288 is trying to acquire lock: [ 173.449523][ T7288] ffff0000cc392270 (&nr_node->node_lock){+...}-{2:2}, at: nr_rt_device_down+0x130/0x710 [ 173.452259][ T7288] [ 173.452259][ T7288] but task is already holding lock: [ 173.454104][ T7288] ffff800016dea618 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xac/0x710 [ 173.456588][ T7288] [ 173.456588][ T7288] which lock already depends on the new lock. [ 173.456588][ T7288] [ 173.459310][ T7288] [ 173.459310][ T7288] the existing dependency chain (in reverse order) is: [ 173.461687][ T7288] [ 173.461687][ T7288] -> #2 (nr_node_list_lock){+...}-{2:2}: [ 173.463792][ T7288] _raw_spin_lock_bh+0x124/0x1c4 [ 173.465260][ T7288] nr_rt_device_down+0xac/0x710 [ 173.466706][ T7288] nr_device_event+0x134/0x160 [ 173.468083][ T7288] raw_notifier_call_chain+0xd4/0x164 [ 173.469676][ T7288] __dev_notify_flags+0x2ac/0x534 [ 173.471115][ T7288] dev_change_flags+0xc8/0x154 [ 173.472546][ T7288] dev_ifsioc+0x140/0xfe4 [ 173.473790][ T7288] dev_ioctl+0x4e0/0xd3c [ 173.475033][ T7288] sock_do_ioctl+0x1dc/0x2dc [ 173.476394][ T7288] sock_ioctl+0x4f0/0x8ac [ 173.477740][ T7288] __arm64_sys_ioctl+0x14c/0x1c8 [ 173.479179][ T7288] invoke_syscall+0x98/0x2b8 [ 173.480553][ T7288] el0_svc_common+0x138/0x258 [ 173.481922][ T7288] do_el0_svc+0x58/0x14c [ 173.483190][ T7288] el0_svc+0x7c/0x1f0 [ 173.484357][ T7288] el0t_64_sync_handler+0x84/0xe4 [ 173.485878][ T7288] el0t_64_sync+0x1a0/0x1a4 [ 173.487244][ T7288] [ 173.487244][ T7288] -> #1 (nr_neigh_list_lock){+...}-{2:2}: [ 173.489538][ T7288] _raw_spin_lock_bh+0x124/0x1c4 [ 173.490999][ T7288] nr_remove_neigh+0x30/0xec [ 173.492361][ T7288] nr_add_node+0x17e4/0x1fc4 [ 173.493843][ T7288] nr_rt_ioctl+0xe58/0x18c8 [ 173.495155][ T7288] nr_ioctl+0x14c/0x4b0 [ 173.496397][ T7288] sock_do_ioctl+0x134/0x2dc [ 173.497805][ T7288] sock_ioctl+0x4f0/0x8ac [ 173.499231][ T7288] __arm64_sys_ioctl+0x14c/0x1c8 [ 173.500740][ T7288] invoke_syscall+0x98/0x2b8 [ 173.502102][ T7288] el0_svc_common+0x138/0x258 [ 173.503619][ T7288] do_el0_svc+0x58/0x14c [ 173.504911][ T7288] el0_svc+0x7c/0x1f0 [ 173.506063][ T7288] el0t_64_sync_handler+0x84/0xe4 [ 173.507576][ T7288] el0t_64_sync+0x1a0/0x1a4 [ 173.508941][ T7288] [ 173.508941][ T7288] -> #0 (&nr_node->node_lock){+...}-{2:2}: [ 173.511156][ T7288] __lock_acquire+0x32d4/0x7638 [ 173.512618][ T7288] lock_acquire+0x240/0x77c [ 173.513956][ T7288] _raw_spin_lock_bh+0x124/0x1c4 [ 173.515445][ T7288] nr_rt_device_down+0x130/0x710 [ 173.516853][ T7288] nr_device_event+0x134/0x160 [ 173.518255][ T7288] raw_notifier_call_chain+0xd4/0x164 [ 173.519957][ T7288] __dev_notify_flags+0x2ac/0x534 [ 173.521430][ T7288] dev_change_flags+0xc8/0x154 [ 173.522810][ T7288] dev_ifsioc+0x140/0xfe4 [ 173.524157][ T7288] dev_ioctl+0x4e0/0xd3c [ 173.525440][ T7288] sock_do_ioctl+0x1dc/0x2dc [ 173.526771][ T7288] sock_ioctl+0x4f0/0x8ac [ 173.528075][ T7288] __arm64_sys_ioctl+0x14c/0x1c8 [ 173.529546][ T7288] invoke_syscall+0x98/0x2b8 [ 173.530972][ T7288] el0_svc_common+0x138/0x258 [ 173.532415][ T7288] do_el0_svc+0x58/0x14c [ 173.533716][ T7288] el0_svc+0x7c/0x1f0 [ 173.534909][ T7288] el0t_64_sync_handler+0x84/0xe4 [ 173.536415][ T7288] el0t_64_sync+0x1a0/0x1a4 [ 173.537769][ T7288] [ 173.537769][ T7288] other info that might help us debug this: [ 173.537769][ T7288] [ 173.540612][ T7288] Chain exists of: [ 173.540612][ T7288] &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock [ 173.540612][ T7288] [ 173.544494][ T7288] Possible unsafe locking scenario: [ 173.544494][ T7288] [ 173.546508][ T7288] CPU0 CPU1 [ 173.547914][ T7288] ---- ---- [ 173.549419][ T7288] lock(nr_node_list_lock); [ 173.550667][ T7288] lock(nr_neigh_list_lock); [ 173.552675][ T7288] lock(nr_node_list_lock); [ 173.553756][ T7284] __quota_error: 7 callbacks suppressed [ 173.553767][ T7284] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 173.554637][ T7288] lock(&nr_node->node_lock); [ 173.554651][ T7288] [ 173.554651][ T7288] *** DEADLOCK *** [ 173.554651][ T7288] [ 173.554654][ T7288] 3 locks held by syz.1.907/7288: [ 173.554661][ T7288] #0: ffff800016cb4be8 [ 173.556179][ T7284] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 173.558728][ T7288] (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 173.558757][ T7288] #1: ffff800016dea5b8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x38/0x710 [ 173.558787][ T7288] #2: ffff800016dea618 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xac/0x710 [ 173.558815][ T7288] [ 173.558815][ T7288] stack backtrace: [ 173.558819][ T7288] CPU: 1 PID: 7288 Comm: syz.1.907 Not tainted 5.15.178-syzkaller #0 [ 173.558830][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.558837][ T7288] Call trace: [ 173.558840][ T7288] dump_backtrace+0x0/0x530 [ 173.561380][ T7284] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 173.562463][ T7288] show_stack+0x2c/0x3c [ 173.562476][ T7288] dump_stack_lvl+0x108/0x170 [ 173.562486][ T7288] dump_stack+0x1c/0x58 [ 173.564074][ T7284] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.564993][ T7288] print_circular_bug+0x150/0x1b8 [ 173.594494][ T7288] check_noncircular+0x2cc/0x378 [ 173.595916][ T7288] __lock_acquire+0x32d4/0x7638 [ 173.597218][ T7288] lock_acquire+0x240/0x77c [ 173.598448][ T7288] _raw_spin_lock_bh+0x124/0x1c4 [ 173.599747][ T7288] nr_rt_device_down+0x130/0x710 [ 173.601134][ T7288] nr_device_event+0x134/0x160 [ 173.602420][ T7288] raw_notifier_call_chain+0xd4/0x164 [ 173.603933][ T7288] __dev_notify_flags+0x2ac/0x534 [ 173.605268][ T7288] dev_change_flags+0xc8/0x154 [ 173.606558][ T7288] dev_ifsioc+0x140/0xfe4 [ 173.607714][ T7288] dev_ioctl+0x4e0/0xd3c [ 173.608888][ T7288] sock_do_ioctl+0x1dc/0x2dc [ 173.610164][ T7288] sock_ioctl+0x4f0/0x8ac [ 173.611351][ T7288] __arm64_sys_ioctl+0x14c/0x1c8 [ 173.612699][ T7288] invoke_syscall+0x98/0x2b8 [ 173.614012][ T7288] el0_svc_common+0x138/0x258 [ 173.615286][ T7288] do_el0_svc+0x58/0x14c [ 173.616425][ T7288] el0_svc+0x7c/0x1f0 [ 173.617542][ T7288] el0t_64_sync_handler+0x84/0xe4 [ 173.618873][ T7288] el0t_64_sync+0x1a0/0x1a4 [ 174.241102][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.243491][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.255291][ T7103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.467715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.471171][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.496258][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.499194][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.503440][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.506221][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.508969][ T7103] device veth0_vlan entered promiscuous mode [ 174.521208][ T7103] device veth1_vlan entered promiscuous mode [ 174.536838][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.548757][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.551748][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.554824][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.560636][ T7103] device veth0_macvtap entered promiscuous mode [ 174.565050][ T7103] device veth1_macvtap entered promiscuous mode [ 174.574182][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.577007][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.580336][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.583330][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.585935][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.588702][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.591243][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.596422][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.601314][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.604312][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.606925][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.618757][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.621452][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.626368][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.633446][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.636237][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.642852][ T7103] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.649819][ T7103] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.652125][ T7103] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.654355][ T7103] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.694656][ T7103] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 174.715520][ T4733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.717566][ T4733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.720433][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.723409][ T7103] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 174.751150][ T4733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.753258][ T4733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.755287][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready