last executing test programs: 21.210954554s ago: executing program 4 (id=257): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x2) fchdir(r2) r3 = dup(r1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) r5 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) fchdir(r6) 21.129776746s ago: executing program 4 (id=262): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18.846036064s ago: executing program 4 (id=269): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 17.908560738s ago: executing program 4 (id=276): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, 0xfffffffffffffffe, &(0x7f0000000380)='\x03\x18\xf5]\xf5cP\xed\x1e\x19\xc0m\'\x19\xee\x80A\x03\xabb\x81\xb8\f\x10E\x17\x18\x0f\xf2\xfb\xa5j\xacO\xd8+:\n\xf3\xee\xf7e\x82=\xcd)\x83Q\xa7;\xcd\xe6\xcf\xcdg\xd8H\xc7\x9a5\x10iZp\x14X\xa7\xcb\xba#7\xc5\xc2wth:r%lm\x14\x02\x12?\xca&\xbc\xd7r\xc1K\xb2\x14\x16q\xc3\x93\x05v\xc4\x83`\\}\xb8\xc4\x02\x00\x80Yw@\x8c7$\xfe\xa5\xd3\xab\tJ\xde8\xa1\xfd\xb0\t\xae|^\xbe\xa3-[W\xb4\xd8=t\xbcI\x96\x95\a\xab\xad\x98\r\xdf!A\x1fT*\xa2$R\xd5t\xa2\x82}\xcaq\x17\xc1\x9b\x1d\x05e\xe5*\x92\x06\x0e*\xbct iZ\xbfF\xe8\xbe4\"nR\x18,\xa6\xe3\x8f\xf0%\xcd\x80\x83\x89e\xf8\xf0\xc3xx\x1cc\xdb\x1b<\xa5\xbf\xa5\xe7\xe6\x8e\xcd\x16\x19a\x1c[\x16\x9a\xb2\xea\xec\xf2\x8cv=\xf3ZRn\xcd\x9b\x98\xec\xa2\x83\x97\xee[\xd3') write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, 0x0, 0x0, 0x42428, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000001b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3048, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0xfc, 0x90, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x1f}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x5, 0x4, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x405, 0x2, 0x3, 0x5, 0xe3, 0xfc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x10, 0xf7, {0x7, 0x25, 0x1, 0xc, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x81, 0x2, 0x0, {0x7, 0x25, 0x1, 0xc, 0xfd, 0xb96c}}}}}}}}]}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 16.091972113s ago: executing program 4 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 15.419221051s ago: executing program 4 (id=290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {}, {0xfff3, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xe, 0x0, 0xe544}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6001}]}, {0x4}, {0xfffffffffffffeff, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100140000307e0000000200000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x700}, 0x0) 15.417234661s ago: executing program 32 (id=290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {}, {0xfff3, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xe, 0x0, 0xe544}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6001}]}, {0x4}, {0xfffffffffffffeff, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100140000307e0000000200000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x700}, 0x0) 10.561081424s ago: executing program 1 (id=322): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x197) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, &(0x7f0000000240)) 10.414939467s ago: executing program 2 (id=323): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000004}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="a7b9545dd30a1d31677b2d5a5091", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x16, 0x0, 0x0, @multicast2}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1e, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='100 1\x00', 0x6) 9.705842735s ago: executing program 2 (id=326): symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090607000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c00018008000140e00040000c00028008000140e00000020c00148008000140ffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9.662865326s ago: executing program 1 (id=327): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 8.138389574s ago: executing program 1 (id=329): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x3fa5, &(0x7f0000000000)={0x0, 0x6cae, 0x100, 0x1, 0x5a}) epoll_create1(0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x800) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 7.977758989s ago: executing program 1 (id=330): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000480)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32\x00'}}) 7.153429999s ago: executing program 2 (id=333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) 7.094229361s ago: executing program 1 (id=334): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0x3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x9, 0x8, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x9, 0xfff, 0x3, 0x80000000, [{0xfffffffc, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0xe3, 0x8}}]}, 0xb0}}, 0x24040084) 6.946093164s ago: executing program 3 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 5.95760802s ago: executing program 0 (id=337): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000340)='overlay\x00', 0x1) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) memfd_create(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/slabinfo\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {0xfb01, 0x4, 0x7fff, 0x4}, 0x1056, [0x7, 0xff, 0xfffffff9, 0x6, 0x7, 0x0, 0x2e, 0x2, 0x1, 0xcb, 0x8, 0xfffffffc, 0x0, 0x5, 0x6, 0x7fffffff, 0x8, 0x60, 0x8, 0x6, 0x42, 0x1, 0x1ff, 0x9, 0x6, 0xffff, 0xb, 0x10, 0x6, 0x7, 0x6, 0x9, 0x74, 0x0, 0x0, 0x5, 0x59, 0xfffffff7, 0x1, 0x32ef, 0x1, 0x6, 0xc, 0x2, 0x1, 0x7, 0xae3, 0x80000000, 0x2, 0x20ca, 0x7fffffff, 0x5, 0x7, 0x9, 0x101, 0x2, 0x3, 0x9, 0x3, 0xa, 0x9, 0x270, 0x2, 0x7], [0x4, 0xec81, 0x5, 0x9, 0xffff760e, 0x4, 0x101, 0x6, 0xf, 0xc, 0x7f, 0x1, 0x6, 0xc0d, 0x1, 0x6496, 0x5, 0x7, 0x3, 0x3, 0x0, 0x2, 0x1, 0x9, 0x1a4d, 0x9, 0x1, 0xffffffff, 0x35357350, 0x9, 0x6c8, 0x10001, 0x5, 0x7f, 0x2, 0x2, 0x9, 0xff, 0xcf92e5e, 0x80000000, 0x6, 0x4d, 0x73, 0x8000, 0xd, 0x8001, 0x5, 0x2, 0xffff, 0x8, 0x8, 0x10001, 0x9, 0xf, 0x3, 0xf, 0x5c4a, 0x2, 0x2, 0x4, 0xf, 0xff, 0x0, 0x9], [0x3, 0xfffffffe, 0x10001, 0x1, 0xd92, 0x3, 0x6, 0x2, 0x3, 0xfff, 0x0, 0x0, 0x9, 0x4, 0x7, 0x21d2, 0x5, 0x6, 0x80000001, 0xfffffff2, 0x0, 0x3c4a, 0x6, 0x98c, 0x101, 0x3, 0x4, 0x1, 0x90e, 0x3, 0x81, 0x400, 0x1, 0x10, 0x2, 0x44cd66a5, 0x10001, 0x5, 0x2006, 0x6, 0x9, 0x10001, 0x45, 0x7, 0x7454, 0x8000ff, 0x8, 0x3, 0x7, 0x0, 0xfffffff7, 0x35c41687, 0x941, 0x2, 0x9, 0x4, 0x0, 0xffff, 0x7ff, 0x10, 0xfc13, 0x2, 0x88, 0x6], [0x0, 0x7, 0xbb8, 0x39e5, 0x0, 0x75050c97, 0x2, 0x3, 0x1, 0x5, 0x6, 0x6, 0xff, 0x3, 0x6, 0x0, 0x5, 0xffff, 0x4, 0xf, 0x10000, 0x8, 0x9, 0x8, 0x7, 0x80, 0x0, 0x3, 0x9, 0x5, 0xfffffffd, 0x5, 0x1, 0x2b1, 0x2, 0xfffffff0, 0x6, 0x5, 0x7ff, 0xc, 0x7fffffff, 0xf, 0x3, 0x1d, 0x80000001, 0x0, 0xa, 0x5f, 0x7, 0x100, 0x0, 0xf, 0x10000, 0x10, 0xe402, 0x7, 0x100, 0x252, 0x0, 0x5, 0x2, 0xb, 0x0, 0xa0000000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.915638291s ago: executing program 2 (id=338): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = fsmount(r2, 0x0, 0x8c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r4, 0x16, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000000)=0x8, 0x4) 5.846360612s ago: executing program 0 (id=339): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0) 5.370590624s ago: executing program 1 (id=340): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) tkill(r1, 0x30) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x2010, 0xffffffffffffffff, 0xec777000) ptrace(0x10, r1) tgkill(r1, r1, 0x5) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 5.368697235s ago: executing program 2 (id=341): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) 5.367563155s ago: executing program 3 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000003080)={&(0x7f0000002c80)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x6, [{@multicast2, 0x6}]}]}}}], 0x20}, 0x140) setrlimit(0xf, &(0x7f0000000000)={0x7}) 4.809426329s ago: executing program 0 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 4.501624256s ago: executing program 2 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "a900110000000402"}, 0x28) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0xbb1, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x78) 4.167244005s ago: executing program 3 (id=345): ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000500), 0x80, r3, 0x0, 0x7}, 0x38) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000040)={[{@sysvgroups}, {@test_dummy_encryption_v1}, {@dioread_nolock}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") 2.690402632s ago: executing program 3 (id=346): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 1.765954746s ago: executing program 3 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.764657946s ago: executing program 0 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) sched_getattr(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f00000004c0), 0x4) 885.451898ms ago: executing program 0 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 884.224568ms ago: executing program 3 (id=349): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xd}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x9}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0\x00', 0x380cc52, &(0x7f0000000000)=ANY=[@ANYBLOB="757466382c73657373696f6e3d3078303030303031303030303030303037662c6e6f636f6d70726573732c6d6f64653d3078303030303030303030303030303030342c6d61703d6e6f726d616c2c6e6f726f636b2c63727566742c756e686964652c6e6f636f6d70726573732c6d61703d6f66662c738fb7b0f9e626cacc1e209d5962736563746f723d307830303030303030303030303030303036", @ANYRESDEC=0x0, @ANYBLOB=',,'], 0x0, 0x9bf, &(0x7f0000001640)="$eJzs3c9vHOX9B/D3+EdiDAoB8uWbIiCb0ICB1LGdEhpxaWKvk6X+UdmORFRVhJKkimKVCloJUKWmUtVTUXuoeqA3jj0hcYFLlVv7F/RQqeJfQD1FPXSrmV3HNvZ67dSxTXi9rPXOj888z+fZmZ1HHu/OE77Kms1m9bjL+Yt/3slk2XvOTXz+0ccflI9f3cy+9OaX+TQZSFJL+pIcTvrHJ+Zmp7sUdCO5nORWUiTZn9bzplxO8bs8tDx/K8WfynorF++yYWxKk6+13T7+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyrGJ0ZGRotMNWYuvlbrrBoCvNPKnuXyPqtG/S4+61pvUpSPDAwsDfV9+NDy6sfLX8fyZGvuyWpA8gzk/QcfP/jKY309S9tvkPBW/Kc9GPKWN3znvfdvvLG4ePXtbUrkq+Z8faYxP9uYPnu+XmvMz9bOnD49cvLC5HxtsjFVn780v1Cfro3P1c8uzM7Vhsafr42eOXOqVh++NHtx5vzE8FR9aeHL3xobGTlde3X4+/Wzc/OzMydfHZ4fv9CYmmrMnK9iytVlzMvlgfi9xkJtoX52ula7dn3x6qlVGa1zSJRBo91aUgaNdYnJ2MjY2Ojo2Njo6ZfOvPTyyEjf8oLeVAtGvmTtJncO2vKI3tKLzV72Yc9mI7f3BA7/g552/5+pNDKTi3kttXV/xjORucxmusP6tqX+//jJ+ob1ruz/l3r5w8urn0jV/z/dmnu6U//fIZed+3kn7+X93MgbWcxirubtVWv330WJzebut2rzP+dTz0wamc9sGpnO2WpJrb2kljM5ndMZyeu5kMnMp5bJNDKVeuZzKfNZSL06osYzl3rOZqGv3NG1DGU8z6eW0ZzJmZxKLfUM51JmczEzOZ+JnK1KuZbr1et+aoMc7wSNbiZobIOgDfr/9oIt9P98Td2DszjcnWa7/9/XPXRofCcSAgAAALbdN/6WA4ce/es/k/48VV1jBwAAAO431cf1niyf+supp1JMNqbqI7udFgAAALCNiuo7dkWSwRxpTS19E8pFAAAAALhPVP//f7p8GiynjqTw9z8AAADcb7rfY79rRHEitdwsV9WutCKvtCPa9/kdnGxM1YfHZ6deGc2z1V0Gqm8arCmtNweT6usHL+RoK+roYOt5cHWJA2XU6PAroxnIsXZDhp4pn54ZWidyrIx8Ic+1Ip9bihzImshTZSQA3O+ObdAfb7b/fyEnWhEnnqhu3973xDp98IieFQD2iu5j7HSNKL69NPxPh7//H821I62PFAznzbyVxVzJierbBtUnDtql5laR5VIHV3wM4USXqwGDK0Z4ObF0PeDIQ+teDxhcMdDLiTVXBDrFntqBPQEAO+fYmn54g/6/2WxNrbn+v/Hf/4M+UggAe8qdEezv4cRutxEAWO2ueunee5gQAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Ad24v7/e3LiZpI9kIaJezsxsDNH+A/3JXulyds0sdtnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHZCkfSut7wn2Z/0jSQ5ufNZ3Ts3dzuBXVbczu28mwO7nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP2mff//nrSeH2wtSl9PcjzJ5SQ/2O0ct9Pt3U5gl624/3+5z9Ms0tfa7Sn6xyfmZqfL3Z/95frPP/r4g/JxN/WUBZQ1rBpcol1D560eqbYanLj6zo2fvfXT2sS5KslzC5NTE9Pn5767HPh48UlSS+uxZCnfXxTto3h1yz8pW7q5eiereifW1vv/6219p97jf/l957YtW07j+uLVsbKmhfprCz//yfV3VwQ9mqPJM0PJ0Oqaflw+OtR0NP0b1Vt8UfymOJA/5nK1/8s0imZR7qKHq/Y/cO364tXhN99avNIhp4M5kuRKMrD5nI6s3RNLqqOup7+sdaQKKn8d6lLehh7sPdBstkocXb8NDzxSHTKDW2pDrXMbKl1e93YbT3V4VR/Ls1ve0892qbHt382W1lzxRfGP4kL+nl+vGP+jp9z/x7OZd2cZU0WuOFI6t/n4csvHVq54/cuRHd+V3AO/zY/ynTv7v2fF+b+9r3bmfLSixnv2vihavVBbNX3oSz1S++zTKct2nodaUR3y/L+8uHa7Lnm+2OWMsk3v/9WKL4oPi6H8KzeN/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOx9RdK73vKe5HiSg0keLudrSXM76usZLLajmE3at2bJzR2sfe/ouTNV3M7tvJsDu5oOAAAAAAAAANvm3MTnH338Qfmo/h/fm28WnyYDrf/09yU5WPyhf3xibna6S0H9yeUkt8rpga3lUG6Xh5bnb5Vzh7feFgBgc/4bAAD//7Y4dyw=") 0s ago: executing program 0 (id=350): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r4, 0x0, 0x38f9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x94) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x1) write(r1, &(0x7f0000000040), 0xffffff4a) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 28.832414][ T4317] cgroup: Unknown subsys name 'net' [ 29.094724][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.362943][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.521740][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.523618][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.525043][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.532750][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.534530][ T4336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.536091][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.537621][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.541224][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.543460][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.544889][ T4336] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.546549][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.547905][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.549146][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.550276][ T4336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.552022][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.554284][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.555578][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.556936][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.558277][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.560450][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.566670][ T4342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.568163][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.576189][ T4332] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.577678][ T4332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.586268][ T4344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.587868][ T4344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.598121][ T4346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.599986][ T4346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.601398][ T4346] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.602882][ T4346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.713430][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.736813][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.749147][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.753360][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 30.771942][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.775522][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.777122][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.788748][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.790094][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.791553][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.798799][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.800058][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.801589][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.823392][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.824747][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.826304][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.828601][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.835082][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 30.847228][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.852859][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.854102][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.855650][ T4339] device bridge_slave_0 entered promiscuous mode [ 30.860435][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.861528][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.863232][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.868069][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.869840][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.870993][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.872507][ T4339] device bridge_slave_1 entered promiscuous mode [ 30.878462][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.882546][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.883648][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.885139][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.889364][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.891472][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.899864][ T4331] team0: Port device team_slave_0 added [ 30.910826][ T4339] team0: Port device team_slave_0 added [ 30.913180][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.914762][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.915897][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.917401][ T4341] device bridge_slave_0 entered promiscuous mode [ 30.919531][ T4331] team0: Port device team_slave_1 added [ 30.926534][ T4339] team0: Port device team_slave_1 added [ 30.928410][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.931945][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.933508][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.935093][ T4341] device bridge_slave_1 entered promiscuous mode [ 30.937619][ T4337] team0: Port device team_slave_0 added [ 30.948084][ T4337] team0: Port device team_slave_1 added [ 30.955400][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.956613][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.960892][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.967424][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.968555][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.975242][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.978255][ T4330] team0: Port device team_slave_0 added [ 30.979496][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.980613][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.984751][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.986747][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.987910][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.994936][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.000264][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.002205][ T4330] team0: Port device team_slave_1 added [ 31.008887][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.009921][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.014077][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.021470][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.030338][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.031482][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.035820][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.037984][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.039031][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.045388][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.093414][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.132328][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.187999][ T4341] team0: Port device team_slave_0 added [ 31.190902][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.192732][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.196743][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.253201][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.292299][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.342212][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.343556][ T4337] Cannot create hsr debugfs directory [ 31.345518][ T4341] team0: Port device team_slave_1 added [ 31.403134][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.442270][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.492202][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.493503][ T4339] Cannot create hsr debugfs directory [ 31.494875][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.496061][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.500250][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.507415][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.508497][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.512728][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.563092][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.612923][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.652135][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.653283][ T4330] Cannot create hsr debugfs directory [ 31.733147][ T4341] device hsr_slave_0 entered promiscuous mode [ 31.772489][ T4341] device hsr_slave_1 entered promiscuous mode [ 31.812133][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.813336][ T4341] Cannot create hsr debugfs directory [ 31.888792][ T4337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.938592][ T4337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.993227][ T4337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.041481][ T4337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.107339][ T4331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.168003][ T4331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.203212][ T4331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.264259][ T4331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.303182][ T4330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.343895][ T4330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.384248][ T4330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.427997][ T4330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.475368][ T4341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.513352][ T4341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.568003][ T4341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.572812][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 32.573094][ T4346] Bluetooth: hci2: command 0x0409 tx timeout [ 32.604033][ T4341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.654829][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.656697][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.662234][ T4346] Bluetooth: hci4: command 0x0409 tx timeout [ 32.662402][ T4344] Bluetooth: hci3: command 0x0409 tx timeout [ 32.663421][ T4346] Bluetooth: hci1: command 0x0409 tx timeout [ 32.696223][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.735484][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.765968][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.809832][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.812210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.814405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.825977][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.827871][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.829547][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.830864][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.833133][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.849809][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.851902][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.854243][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.855513][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.865365][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.873416][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.877802][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.881943][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.888195][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.893994][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.898132][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.901560][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.906607][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.911480][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.913791][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.915378][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.916884][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.918379][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.919531][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.921068][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.933771][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.935268][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.939062][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.942306][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.944000][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.945463][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.946772][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.956661][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.958362][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.960796][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.968725][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.970550][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.972647][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.974012][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.979807][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.988165][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.996777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.998437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.999909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.001387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.005756][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.006927][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.008492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.010116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.011940][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.013322][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.015457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.017269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.019169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.020814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.025763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.027502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.029084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.035411][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.039565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.041344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.043637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.045268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.046771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.048317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.049903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.051445][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.052699][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.058129][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.068545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.070105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.074877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.076972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.078616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.080388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.081902][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.083188][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.085161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.086590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.088196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.096706][ T4339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.098456][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.100760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.103188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.104913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.106567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.108507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.109881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.111359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.122649][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.124522][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.126311][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.127658][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.131576][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.133789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.138713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.140991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.144370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.147534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.149277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.158412][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.160057][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.161552][ T1580] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.162836][ T1580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.178031][ T4331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.179621][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.183552][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.185105][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.186566][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.188226][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.189740][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.194887][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.199961][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.201788][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.206930][ T1580] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.208307][ T1580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.211166][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.214397][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.223609][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.231501][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.233610][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.235646][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.237340][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.238842][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.240126][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.241359][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.244655][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.246146][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.247687][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.249141][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.257536][ T4337] device veth0_vlan entered promiscuous mode [ 33.260420][ T4337] device veth1_vlan entered promiscuous mode [ 33.262152][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.263917][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.265535][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.269629][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.271161][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.273519][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.283248][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.290351][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.291866][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.294788][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.298990][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.315818][ T4330] device veth0_vlan entered promiscuous mode [ 33.317536][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.319203][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.320747][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.323528][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.328804][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.330531][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.334038][ T4337] device veth0_macvtap entered promiscuous mode [ 33.339710][ T4337] device veth1_macvtap entered promiscuous mode [ 33.355843][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.357506][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.359085][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.360409][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.365233][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.367062][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.370770][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.373368][ T4330] device veth1_vlan entered promiscuous mode [ 33.380901][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.385008][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.389424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.391037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.393217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.394873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.403949][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.406504][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.408234][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.409908][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.411567][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.427325][ T4337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.428708][ T4337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.430070][ T4337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.431450][ T4337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.436693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.438472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.446133][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.447724][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.449368][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.450690][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.461136][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.463918][ T4331] device veth0_vlan entered promiscuous mode [ 33.470063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.471543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.477706][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.479547][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.481965][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.484276][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.490084][ T4339] device veth0_vlan entered promiscuous mode [ 33.491845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.494679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.496732][ T4330] device veth0_macvtap entered promiscuous mode [ 33.499728][ T4331] device veth1_vlan entered promiscuous mode [ 33.506183][ T4330] device veth1_macvtap entered promiscuous mode [ 33.520193][ T4339] device veth1_vlan entered promiscuous mode [ 33.542474][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.544130][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.545567][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.547204][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.548839][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.550292][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.551764][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.558034][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.559875][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.561616][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.565062][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.568816][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.571722][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.576309][ T4331] device veth0_macvtap entered promiscuous mode [ 33.587054][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.588606][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.590212][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.594330][ T4339] device veth0_macvtap entered promiscuous mode [ 33.600153][ T4331] device veth1_macvtap entered promiscuous mode [ 33.601959][ T4339] device veth1_macvtap entered promiscuous mode [ 33.606532][ T286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.607816][ T286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.610957][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.613375][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.615550][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.618552][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.620247][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.621719][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.625398][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.627261][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.628765][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.640988][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.642600][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.644020][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.645439][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.647729][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.649377][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.658111][ T4341] device veth0_vlan entered promiscuous mode [ 33.661310][ T4341] device veth1_vlan entered promiscuous mode [ 33.663311][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.665073][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.666835][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.668675][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.671483][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.676310][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.677930][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.679479][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.681141][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.684407][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.686044][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.688314][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.689634][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.691171][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.696868][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.698379][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.700035][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.701614][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.704142][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.710198][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.711505][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.715844][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.717276][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.718799][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.720570][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.731962][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.736108][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.737822][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.739731][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.742765][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.745126][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.746697][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.748070][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.749585][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.751034][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.755538][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.757855][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.759310][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.761157][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.763394][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.765063][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.770885][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.773443][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.774708][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.776074][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.786633][ T286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.787959][ T286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.789286][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.794199][ T4331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.795818][ T4331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.797266][ T4331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.798711][ T4331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.821944][ T4341] device veth0_macvtap entered promiscuous mode [ 33.825764][ T4341] device veth1_macvtap entered promiscuous mode [ 33.835617][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.837417][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.838846][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.850612][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.857586][ T286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.858937][ T286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.860969][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.898042][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.899506][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.908751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.927528][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.929321][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.930957][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.938764][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.940567][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.942725][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.944413][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.946692][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.949289][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.962342][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.964084][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.966440][ T1580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.967749][ T1580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.983447][ T286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.984706][ T286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.987030][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.988611][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.999014][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.000919][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.006850][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.008672][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.010635][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.015026][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.016587][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.018278][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.020922][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.028937][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.030200][ T4412] loop3: detected capacity change from 0 to 512 [ 34.030729][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.038437][ T4412] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.038757][ T4410] loop0: detected capacity change from 0 to 40427 [ 34.040566][ T4412] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.051079][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.051409][ T4410] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 34.052641][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.054421][ T4410] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 34.056242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.064816][ T4410] F2FS-fs (loop0): invalid crc value [ 34.070019][ T4341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.071495][ T4341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.074799][ T4412] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.4: inode has both inline data and extents flags [ 34.077447][ T4341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.077468][ T4412] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 34.077615][ T4412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.078835][ T4341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.088627][ T4410] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.126659][ T4410] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 34.128021][ T4410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.507004][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.508281][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.509672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.545981][ T286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.547414][ T286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.550075][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.604010][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 34.738100][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 34.738129][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 34.738217][ T4346] Bluetooth: hci0: command 0x041b tx timeout [ 34.742168][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 34.743698][ T4346] Bluetooth: hci4: command 0x041b tx timeout [ 35.159128][ T4437] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 35.271618][ T4443] device gretap1 entered promiscuous mode [ 36.097524][ T22] cfg80211: failed to load regulatory.db [ 36.727667][ T4477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16'. [ 36.822809][ T4342] Bluetooth: hci4: command 0x040f tx timeout [ 36.822839][ T4344] Bluetooth: hci3: command 0x040f tx timeout [ 36.825129][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 36.826600][ T4346] Bluetooth: hci2: command 0x040f tx timeout [ 36.902109][ T4338] Bluetooth: hci1: command 0x040f tx timeout [ 37.117433][ T4482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.119562][ T4482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.166147][ T4482] mmap: syz.3.21 (4482): VmData 175845376 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 37.532358][ T4490] Zero length message leads to an empty skb [ 37.605003][ T4495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 37.606768][ T4495] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 38.152412][ T4503] device syzkaller0 entered promiscuous mode [ 38.158049][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.159613][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.164165][ T4503] tipc: Started in network mode [ 38.165121][ T4503] tipc: Node identity 7ef06111801, cluster identity 4711 [ 38.166790][ T4503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.168244][ T4503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.170042][ T4503] tipc: Enabled bearer , priority 0 [ 38.173075][ T4502] tipc: Resetting bearer [ 38.555936][ T4516] loop4: detected capacity change from 0 to 128 [ 38.560450][ T4516] ======================================================= [ 38.560450][ T4516] WARNING: The mand mount option has been deprecated and [ 38.560450][ T4516] and is ignored by this kernel. Remove the mand [ 38.560450][ T4516] option from the mount to silence this warning. [ 38.560450][ T4516] ======================================================= [ 38.600668][ T4502] tipc: Disabling bearer [ 38.609372][ T4516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.710120][ T4521] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 38.715145][ T4521] CIFS: Attempting to mount \\127.0.0.1\share [ 38.722509][ T4521] CIFS: VFS: Error connecting to socket. Aborting operation. [ 38.723924][ T4521] CIFS: VFS: cifs_mount failed w/return code = -111 [ 38.873834][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 38.972763][ T4338] Bluetooth: hci1: command 0x0419 tx timeout [ 39.007423][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 39.008579][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 39.008600][ T4346] Bluetooth: hci3: command 0x0419 tx timeout [ 39.009896][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 39.124022][ T4528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.126927][ T4528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.773098][ T4540] loop0: detected capacity change from 0 to 128 [ 39.785145][ T4540] FAT-fs (loop0): bogus number of FAT structure [ 39.786520][ T4540] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 39.788161][ T4540] FAT-fs (loop0): Can't find a valid FAT filesystem [ 40.021451][ T4546] loop2: detected capacity change from 0 to 512 [ 40.046894][ T4324] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.081336][ T4546] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.363833][ T4546] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.40: corrupted inode contents [ 40.369294][ T4546] EXT4-fs (loop2): Remounting filesystem read-only [ 40.370420][ T4546] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz.2.40: mark_inode_dirty error [ 40.377525][ T4546] EXT4-fs (loop2): Remounting filesystem read-only [ 40.378913][ T4546] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.40: corrupted inode contents [ 40.381267][ T4546] EXT4-fs (loop2): Remounting filesystem read-only [ 40.383256][ T4546] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.40: mark_inode_dirty error [ 40.385425][ T4546] EXT4-fs (loop2): Remounting filesystem read-only [ 40.400651][ T4553] netlink: 'syz.4.41': attribute type 10 has an invalid length. [ 40.414600][ T4553] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.416993][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 40.434431][ T4553] bond0: (slave team0): Enslaving as an active interface with an up link [ 40.681127][ T4566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.701329][ T4566] device bond_slave_0 entered promiscuous mode [ 40.702556][ T4566] device bond_slave_1 entered promiscuous mode [ 40.704301][ T4566] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 40.707071][ T4566] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 40.720539][ T4566] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 40.851339][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 40.863648][ T4572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 41.664139][ T4578] device wlan0 entered promiscuous mode [ 43.072040][ C0] sched: RT throttling activated [ 43.303083][ T4606] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 43.465791][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 43.537985][ T4625] loop2: detected capacity change from 0 to 512 [ 43.654300][ T4625] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 43.656126][ T4625] EXT4-fs (loop2): failed to open journal device unknown-block(8,1) -6 [ 43.795024][ T4324] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.374991][ T4674] loop3: detected capacity change from 0 to 8192 [ 45.399990][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 45.438176][ T4674] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 45.515469][ T4714] loop4: detected capacity change from 0 to 764 [ 46.433911][ T4723] loop4: detected capacity change from 0 to 164 [ 46.457340][ T4726] bridge0: port 3(syz_tun) entered blocking state [ 46.458638][ T4726] bridge0: port 3(syz_tun) entered disabled state [ 46.460963][ T4726] device syz_tun entered promiscuous mode [ 46.465421][ T4726] bridge0: port 3(syz_tun) entered blocking state [ 46.466582][ T4726] bridge0: port 3(syz_tun) entered forwarding state [ 46.475319][ T4324] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 46.534298][ T4726] netlink: 'syz.1.72': attribute type 12 has an invalid length. [ 46.535691][ T4726] netlink: 'syz.1.72': attribute type 29 has an invalid length. [ 46.536951][ T4726] netlink: 148 bytes leftover after parsing attributes in process `syz.1.72'. [ 46.538371][ T4726] netlink: 59 bytes leftover after parsing attributes in process `syz.1.72'. [ 46.572146][ T4728] loop1: detected capacity change from 0 to 256 [ 46.577928][ T4728] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.615032][ T4728] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 46.617462][ T4728] FAT-fs (loop1): Filesystem has been set read-only [ 46.721603][ T4728] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 46.730516][ T4735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 49.085948][ T4780] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 49.444405][ T4331] bridge0: port 3(syz_tun) entered disabled state [ 49.458459][ T4785] loop3: detected capacity change from 0 to 256 [ 49.469931][ T4785] exfat: Deprecated parameter 'utf8' [ 49.472109][ T4785] exfat: Deprecated parameter 'namecase' [ 49.490084][ T4785] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 49.496473][ T4331] device syz_tun left promiscuous mode [ 49.498334][ T4331] bridge0: port 3(syz_tun) entered disabled state [ 49.559021][ T4788] device bond_slave_0 entered promiscuous mode [ 49.560237][ T4788] device bond_slave_1 entered promiscuous mode [ 49.561373][ T4788] device team_slave_0 entered promiscuous mode [ 49.562521][ T4788] device team_slave_1 entered promiscuous mode [ 49.564440][ T4791] binder: 4790:4791 tried to acquire reference to desc 0, got 1 instead [ 49.570338][ T4788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 49.585977][ T4791] binder: 4790:4791 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 49.594613][ T4791] binder: 4791 RLIMIT_NICE not set [ 49.595695][ T4791] binder: 4791 RLIMIT_NICE not set [ 49.598089][ T4791] binder: 4791 RLIMIT_NICE not set [ 49.598428][ T4788] bond1: (slave macvlan2): making interface the new active one [ 49.599080][ T4791] binder: 4790:4791 got transaction with invalid fd, -1 [ 49.608476][ T4791] binder: 4791:4790 translate fd failed [ 49.609430][ T4791] binder: 4790:4791 transaction reply to 4790:4791 failed 6/29201/-9, size 88-24 line 3432 [ 49.611103][ T4791] binder: send failed reply for transaction 5 to 4790:4791 [ 49.629689][ T4788] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 49.636512][ T113] binder: undelivered TRANSACTION_COMPLETE [ 49.637854][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.639269][ T113] binder: undelivered TRANSACTION_ERROR: 29190 [ 50.153098][ T4798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 50.212717][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.228097][ T4336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.230114][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.231770][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.236762][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 50.238336][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.276593][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.334070][ T4812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.100'. [ 50.661537][ T4816] loop4: detected capacity change from 0 to 512 [ 50.684091][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.707131][ T4816] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.102: iget: bad i_size value: 38620345925642 [ 50.709915][ T4816] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.102: couldn't read orphan inode 15 (err -117) [ 50.716836][ T4816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.094956][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.153723][ T4809] chnl_net:caif_netlink_parms(): no params data found [ 51.189284][ T4809] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.190751][ T4809] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.192829][ T4809] device bridge_slave_0 entered promiscuous mode [ 51.196152][ T4809] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.197446][ T4809] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.199309][ T4809] device bridge_slave_1 entered promiscuous mode [ 51.533452][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.541162][ T4668] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:12: bg 0: block 5: invalid block bitmap [ 51.544906][ T4668] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 51.550529][ T4668] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.550529][ T4668] [ 51.560775][ T4668] EXT4-fs (loop4): Total free blocks count 0 [ 51.561373][ T4809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.564738][ T4809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.566256][ T4668] EXT4-fs (loop4): Free/Dirty block details [ 51.570285][ T4668] EXT4-fs (loop4): free_blocks=0 [ 51.571921][ T4668] EXT4-fs (loop4): dirty_blocks=2372 [ 51.574063][ T4809] team0: Port device team_slave_0 added [ 51.575857][ T4809] team0: Port device team_slave_1 added [ 51.578651][ T4835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.106'. [ 51.582178][ T4668] EXT4-fs (loop4): Block reservation details [ 51.585413][ T4668] EXT4-fs (loop4): i_reserved_data_blocks=2372 [ 51.598437][ T4809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.599688][ T4809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.608249][ T4809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.610861][ T4809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.612482][ T4809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.619031][ T4668] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 320 with error 28 [ 51.642531][ T4809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.695532][ T4809] device hsr_slave_0 entered promiscuous mode [ 51.744001][ T4809] device hsr_slave_1 entered promiscuous mode [ 51.780865][ T4843] loop4: detected capacity change from 0 to 1024 [ 51.782227][ T4809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.784231][ T4809] Cannot create hsr debugfs directory [ 51.785314][ T4835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.106'. [ 51.851348][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 52.000073][ T4857] device syzkaller0 entered promiscuous mode [ 52.001890][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 52.049384][ T4854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.053877][ T4854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.056377][ T4854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.108544][ T9] tipc: Left network mode [ 52.131944][ T4871] loop0: detected capacity change from 0 to 640 [ 52.252861][ T4336] Bluetooth: hci1: command 0x0409 tx timeout [ 52.436429][ T4876] MTDSB: Device #1 doesn't appear to exist [ 52.436429][ T4876] [ 52.467384][ T4871] ftl_cs: FTL header not found. [ 52.512932][ T4871] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 52.949936][ T4887] loop4: detected capacity change from 0 to 256 [ 53.123457][ T4884] loop2: detected capacity change from 0 to 40427 [ 53.130756][ T4884] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 53.136244][ T4884] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 53.138754][ T4884] F2FS-fs (loop2): invalid crc value [ 53.139014][ T4895] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\" or missing value [ 53.144593][ T4884] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.160505][ T4884] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 53.162241][ T4884] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.285061][ T4910] sctp: [Deprecated]: syz.4.121 (pid 4910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 53.285061][ T4910] Use struct sctp_sack_info instead [ 53.896763][ T4809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.025508][ T4809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.063931][ T4946] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 54.179944][ T4809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.332561][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 54.677607][ T4946] bond2: (slave gretap1): making interface the new active one [ 54.684732][ T4946] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 54.704396][ T4965] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 54.774083][ T4809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.026449][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 55.091806][ T5004] loop4: detected capacity change from 0 to 256 [ 55.121186][ T4976] device syzkaller0 entered promiscuous mode [ 55.157830][ T4324] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.462297][ T4338] Bluetooth: hci1: command 0x040f tx timeout [ 58.492084][ T4338] Bluetooth: hci1: command 0x0419 tx timeout [ 64.493249][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494484][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.465128][ T5031] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 67.559398][ T4809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.603901][ T5054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.145'. [ 67.651008][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 67.701325][ T4809] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.712578][ T5066] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\" or missing value [ 67.721529][ T9] device hsr_slave_0 left promiscuous mode [ 67.743401][ T9] device hsr_slave_1 left promiscuous mode [ 67.862606][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.864258][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.056105][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.068266][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.069885][ T9] device bridge_slave_1 left promiscuous mode [ 68.071788][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.113161][ T9] device bridge_slave_0 left promiscuous mode [ 68.114492][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.235068][ T9] device veth1_macvtap left promiscuous mode [ 68.236239][ T9] device veth0_macvtap left promiscuous mode [ 68.237224][ T9] device veth1_vlan left promiscuous mode [ 68.238253][ T9] device veth0_vlan left promiscuous mode [ 68.559062][ T5073] loop2: detected capacity change from 0 to 512 [ 68.576319][ T5073] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.151: iget: bad i_size value: 38620345925642 [ 68.587443][ T5073] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.151: couldn't read orphan inode 15 (err -117) [ 68.589687][ T5073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 69.251194][ T1772] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 69.254328][ T1772] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 69.256707][ T1772] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.256707][ T1772] [ 69.258299][ T1772] EXT4-fs (loop2): Total free blocks count 0 [ 69.259269][ T1772] EXT4-fs (loop2): Free/Dirty block details [ 69.260366][ T1772] EXT4-fs (loop2): free_blocks=0 [ 69.261179][ T1772] EXT4-fs (loop2): dirty_blocks=16020 [ 69.262204][ T1772] EXT4-fs (loop2): Block reservation details [ 69.263235][ T1772] EXT4-fs (loop2): i_reserved_data_blocks=16020 [ 69.429290][ T4683] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 70.994675][ T9] team0 (unregistering): Port device team_slave_1 removed [ 71.154854][ T9] team0 (unregistering): Port device team_slave_0 removed [ 71.312612][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.532615][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.993667][ T9] bond0 (unregistering): Released all slaves [ 73.284372][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.286029][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.287390][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.289086][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.290670][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.292026][ T4668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.305562][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.307418][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.308864][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.309996][ T4668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.312581][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.314530][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.316205][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.318108][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.319690][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.321431][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.327764][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.329233][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.331108][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.333162][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.334681][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.336181][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.340635][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.345098][ T5076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.160'. [ 73.352407][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.353814][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.387349][ T5103] netlink: 'syz.3.154': attribute type 4 has an invalid length. [ 73.415904][ T5106] sctp: [Deprecated]: syz.4.156 (pid 5106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.415904][ T5106] Use struct sctp_sack_info instead [ 73.506093][ T5109] netlink: 'syz.3.154': attribute type 4 has an invalid length. [ 73.507761][ T5100] netlink: 'syz.3.154': attribute type 4 has an invalid length. [ 74.503290][ T5121] jffs2: notice: (5121) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 74.616053][ T5133] process 'syz.0.163' launched './file1' with NULL argv: empty string added [ 74.640010][ T4809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.644316][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.645797][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.713892][ T5124] loop2: detected capacity change from 0 to 256 [ 74.726979][ T5124] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.728814][ T5124] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 74.729020][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.736762][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.743268][ T5124] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 74.758543][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.760944][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.517042][ T4809] device veth0_vlan entered promiscuous mode [ 75.547711][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.549952][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.559352][ T4809] device veth1_vlan entered promiscuous mode [ 75.578216][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.580232][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.596180][ T4809] device veth0_macvtap entered promiscuous mode [ 75.699628][ T4809] device veth1_macvtap entered promiscuous mode [ 77.226389][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.229312][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.239324][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.241105][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.268476][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.270385][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.273218][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.274892][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.285554][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.291715][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.298619][ T4809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.305759][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.307529][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.312926][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.314788][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.316435][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.318339][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.320305][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.323159][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.325226][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.327326][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.329684][ T4809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.342774][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.353035][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.355466][ T4809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.357008][ T4809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.359595][ T4809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.375752][ T4809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.387218][ T5169] tipc: Started in network mode [ 77.388106][ T5169] tipc: Node identity 7f000001, cluster identity 4711 [ 77.390077][ T5169] tipc: Enabled bearer , priority 10 [ 77.446587][ T5174] netlink: 104 bytes leftover after parsing attributes in process `syz.4.173'. [ 77.455193][ T5174] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 77.457805][ T5174] tipc: Enabled bearer , priority 10 [ 77.472518][ T1580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.474280][ T1580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.484966][ T4707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.485632][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.487898][ T4707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.507506][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.607943][ T5179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.175'. [ 77.905377][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 77.907246][ T5178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.621082][ T5178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.762140][ T113] tipc: Node number set to 2130706433 [ 78.769089][ T5191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 78.781567][ T5191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.788061][ T5193] device macvlan2 entered promiscuous mode [ 78.814210][ T5195] bond1: (slave vti0): refused to change device type [ 78.879032][ T5205] binder: 5204:5205 tried to acquire reference to desc 0, got 1 instead [ 78.891102][ T5205] binder: 5204:5205 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 78.910401][ T5205] binder: 5205 RLIMIT_NICE not set [ 78.914556][ T5205] binder: 5205 RLIMIT_NICE not set [ 78.919429][ T5205] binder: release 5204:5205 transaction 11 in, still active [ 78.934455][ T5205] binder: send failed reply for transaction 11 to 5204:5205 [ 78.954313][ T4319] binder: undelivered TRANSACTION_COMPLETE [ 78.955337][ T4319] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.466030][ T5222] input: syz0 as /devices/virtual/input/input2 [ 79.504571][ T5226] binder: 5225:5226 tried to acquire reference to desc 0, got 1 instead [ 79.560763][ T4382] binder: release 5225:5226 transaction 16 out, still active [ 79.571759][ T4382] binder: send failed reply for transaction 16, target dead [ 79.825581][ T5238] No such timeout policy "syz1" [ 80.194109][ T5245] netlink: 'syz.2.196': attribute type 4 has an invalid length. [ 80.211288][ T5245] netlink: 'syz.2.196': attribute type 4 has an invalid length. [ 80.539577][ T5245] netlink: 'syz.2.196': attribute type 4 has an invalid length. [ 80.561898][ T5248] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 82.455983][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 82.470064][ T5264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.638127][ T5264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.176409][ T5288] No such timeout policy "syz1" [ 83.688759][ T5294] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 84.158145][ T5304] loop3: detected capacity change from 0 to 1764 [ 86.552382][ T5347] device syzkaller0 entered promiscuous mode [ 86.563491][ T5349] IPVS: lc: FWM 3 0x00000003 - no destination available [ 86.565407][ T5347] tipc: Started in network mode [ 86.566417][ T5347] tipc: Node identity eef45aeb7b39, cluster identity 4711 [ 86.567790][ T5347] tipc: Enabled bearer , priority 0 [ 86.574029][ T5344] tipc: Resetting bearer [ 86.917894][ T5354] loop2: detected capacity change from 0 to 764 [ 87.438031][ T5362] loop1: detected capacity change from 0 to 512 [ 87.537751][ T5362] EXT4-fs: Ignoring removed oldalloc option [ 87.559567][ T5362] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.564418][ T5344] tipc: Disabling bearer [ 87.600729][ T5362] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.176982][ T4809] EXT4-fs (loop1): unmounting filesystem. [ 89.564745][ T5405] netlink: 36 bytes leftover after parsing attributes in process `syz.2.236'. [ 89.965086][ T5399] loop1: detected capacity change from 0 to 1764 [ 90.061392][ T5401] tipc: Enabling of bearer rejected, failed to enable media [ 92.009436][ T5431] using random self ethernet address [ 92.011023][ T5431] using random host ethernet address [ 93.580142][ T5453] No such timeout policy "syz1" [ 94.926829][ T5470] jffs2: notice: (5470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.404145][ T5506] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 95.405854][ T5506] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 95.960684][ T5516] loop2: detected capacity change from 0 to 2048 [ 97.372366][ T5516] EXT4-fs: test_dummy_encryption requires encrypt feature [ 97.510332][ T5526] netlink: 68 bytes leftover after parsing attributes in process `syz.1.270'. [ 98.206546][ T5534] netlink: 156 bytes leftover after parsing attributes in process `syz.1.272'. [ 98.209737][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 98.367617][ T5544] loop4: detected capacity change from 0 to 4096 [ 98.405352][ T5544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.798975][ T5544] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 98.800857][ T5544] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 98.854450][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.855868][ T5560] bridge0: port 2(bridge_slave_1) entered listening state [ 98.857918][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.859246][ T5560] bridge0: port 1(bridge_slave_0) entered listening state [ 98.863653][ T5544] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.276: Failed to acquire dquot type 1 [ 98.871678][ T5544] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 98.888362][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.914122][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.915670][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.238278][ T5560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.242606][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 99.265417][ T5559] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 99.272568][ T113] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 99.402505][ T4377] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 99.410543][ T5572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.420356][ T5572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.837454][ T27] audit: type=1326 audit(99.820:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.0.284" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f781a8 code=0x0 [ 100.680298][ T5592] tipc: Enabled bearer , priority 0 [ 100.812255][ C0] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 100.893756][ T4338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.896211][ T4338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.898031][ T4338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.899759][ T4338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.117775][ T5606] loop1: detected capacity change from 0 to 1024 [ 101.374298][ T4338] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 101.375898][ T4338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.612182][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 101.854248][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.911666][ T4377] tipc: Node number set to 2513263339 [ 101.994778][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.133562][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.138805][ T5604] chnl_net:caif_netlink_parms(): no params data found [ 102.145194][ T5631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.300'. [ 102.148848][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.151144][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.152739][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.724281][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.731560][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.733972][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.737454][ T5604] device bridge_slave_0 entered promiscuous mode [ 102.748315][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.750430][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.755093][ T5604] device bridge_slave_1 entered promiscuous mode [ 102.759003][ T5644] loop2: detected capacity change from 0 to 4096 [ 102.793689][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.808304][ T5644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.816759][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.826936][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 102.849813][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 102.865514][ T5604] team0: Port device team_slave_0 added [ 102.874697][ T5604] team0: Port device team_slave_1 added [ 102.905468][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.908140][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.922531][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.941598][ T5653] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 102.951495][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.962429][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.986790][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.007427][ T5653] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.009749][ T5653] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.011274][ T5653] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.017592][ T5653] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.025843][ T5653] bond1: (slave geneve2): making interface the new active one [ 103.028601][ T5653] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 103.060871][ T5660] loop1: detected capacity change from 0 to 512 [ 103.062496][ T5660] FAT-fs (loop1): Unrecognized mount option "Îw‚O{ûD‡Z¿shortname=lower" or missing value [ 103.108682][ T5658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.306'. [ 103.118881][ T5658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.169552][ T5660] loop1: detected capacity change from 0 to 512 [ 103.169786][ T5604] device hsr_slave_0 entered promiscuous mode [ 103.171165][ T5660] EXT4-fs: Ignoring removed bh option [ 103.175638][ T5660] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 103.452108][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 103.467263][ T5604] device hsr_slave_1 entered promiscuous mode [ 103.484062][ T5672] loop3: detected capacity change from 0 to 512 [ 103.508687][ T5672] EXT4-fs (loop3): can't read group descriptor 0 [ 103.576505][ T9] tipc: Disabling bearer [ 103.578175][ T9] tipc: Disabling bearer [ 103.582517][ T5059] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.586442][ T9] tipc: Left network mode [ 103.964862][ T5672] netlink: 'syz.3.311': attribute type 13 has an invalid length. [ 103.969899][ T5672] Bluetooth: MGMT ver 1.22 [ 104.003012][ T5604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.114507][ T5604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.162547][ T5604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.473864][ T5604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.472189][ T5714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.473649][ T5714] IPv6: NLM_F_CREATE should be set when creating new route [ 105.474962][ T5714] IPv6: NLM_F_CREATE should be set when creating new route [ 105.486304][ T5712] device syzkaller0 entered promiscuous mode [ 105.499635][ T5714] device bridge1 entered promiscuous mode [ 105.542208][ T4338] Bluetooth: hci4: command 0x041b tx timeout [ 105.585989][ T5714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.587980][ T5714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.612880][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.617188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.629230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.739868][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.177283][ T27] audit: type=1326 audit(106.160:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d781a8 code=0x7ffc0000 [ 106.181695][ T27] audit: type=1326 audit(106.160:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d781a8 code=0x7ffc0000 [ 106.188775][ T27] audit: type=1326 audit(106.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d781a8 code=0x7ffc0000 [ 106.193407][ T27] audit: type=1326 audit(106.170:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d781a8 code=0x7ffc0000 [ 106.197519][ T27] audit: type=1326 audit(106.170:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4d781a8 code=0x7ffc0000 [ 106.204241][ T27] audit: type=1326 audit(106.170:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d781a8 code=0x7ffc0000 [ 106.212225][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.213918][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.215323][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.216458][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.217789][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.219485][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.221039][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.222309][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.232194][ T27] audit: type=1326 audit(106.170:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d781a8 code=0x7ffc0000 [ 106.236136][ T27] audit: type=1326 audit(106.170:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d781a8 code=0x7ffc0000 [ 106.236372][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.239839][ T27] audit: type=1326 audit(106.170:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d781a8 code=0x7ffc0000 [ 106.243912][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.246048][ T27] audit: type=1326 audit(106.170:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb4d781a8 code=0x7ffc0000 [ 106.250172][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.257343][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.264501][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.271474][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.276945][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.279689][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.317444][ T5604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.319629][ T5604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.326333][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.328174][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.329930][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.333615][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.337317][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.355433][ T5747] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 106.358092][ T5747] netdevsim netdevsim100 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 107.794501][ T4338] Bluetooth: hci4: command 0x040f tx timeout [ 108.358878][ T9] bond2: (slave gretap1): Releasing active interface [ 108.680432][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.681761][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.683356][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.040190][ T5816] loop3: detected capacity change from 0 to 512 [ 109.063186][ T5816] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.075328][ T5816] EXT4-fs warning (device loop3): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 109.138323][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 109.166733][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 110.028667][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 111.545974][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.547888][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.549532][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.551209][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.553550][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.555163][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.574797][ T27] kauditd_printk_skb: 99 callbacks suppressed [ 111.574805][ T27] audit: type=1326 audit(111.560:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.340" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d781a8 code=0x0 [ 112.419047][ T5880] loop3: detected capacity change from 0 to 2048 [ 112.913125][ T5880] EXT4-fs: test_dummy_encryption requires encrypt feature [ 113.304849][ T5604] device veth0_vlan entered promiscuous mode [ 113.308460][ T5604] device veth1_vlan entered promiscuous mode [ 113.324765][ T9] device hsr_slave_0 left promiscuous mode [ 113.342277][ T5683] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.372682][ T9] device hsr_slave_1 left promiscuous mode [ 113.412742][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.414098][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.415612][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.416806][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.418244][ T9] device bridge_slave_1 left promiscuous mode [ 113.419269][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.452936][ T9] device bridge_slave_0 left promiscuous mode [ 113.460590][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.569607][ T9] device bond_slave_0 left promiscuous mode [ 113.570718][ T9] device bond_slave_1 left promiscuous mode [ 113.571762][ T9] device team_slave_0 left promiscuous mode [ 113.572855][ T9] device team_slave_1 left promiscuous mode [ 113.942257][ T9] device veth1_macvtap left promiscuous mode [ 113.944093][ T9] device veth0_macvtap left promiscuous mode [ 113.945184][ T9] device veth1_vlan left promiscuous mode [ 113.946140][ T9] device veth0_vlan left promiscuous mode [ 114.045440][ T9] bond2 (unregistering): Released all slaves [ 114.093333][ T9] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 114.135019][ T9] bond1 (unregistering): Released all slaves [ 115.748877][ T5900] loop3: detected capacity change from 0 to 1764 [ 115.782929][ T5683] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.252388][ C1] [ 116.252880][ C1] ================================ [ 116.253689][ C1] WARNING: inconsistent lock state [ 116.254528][ C1] syzkaller #0 Not tainted [ 116.255283][ C1] -------------------------------- [ 116.256125][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 116.257313][ C1] ksoftirqd/1/21 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 116.258390][ C1] ffff0000f3c38130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x94/0x138 [ 116.259962][ C1] {SOFTIRQ-ON-W} state was registered at: [ 116.260883][ C1] lock_acquire+0x20c/0x638 [ 116.261614][ C1] lock_sock_nested+0x70/0x130 [ 116.262409][ C1] x25_bind+0x1b4/0x3d4 [ 116.263086][ C1] __sys_bind+0x1f8/0x2a4 [ 116.263817][ C1] __arm64_sys_bind+0x7c/0x94 [ 116.264619][ C1] invoke_syscall+0x98/0x290 [ 116.265371][ C1] el0_svc_common+0x13c/0x258 [ 116.266136][ C1] do_el0_svc+0x5c/0x134 [ 116.266841][ C1] el0_svc+0x58/0x128 [ 116.267498][ C1] el0t_64_sync_handler+0x84/0xf0 [ 116.268295][ C1] el0t_64_sync+0x18c/0x190 [ 116.269032][ C1] irq event stamp: 790716 [ 116.269712][ C1] hardirqs last enabled at (790716): [] __local_bh_enable_ip+0x1f8/0x37c [ 116.271443][ C1] hardirqs last disabled at (790715): [] __local_bh_enable_ip+0x178/0x37c [ 116.273099][ C1] softirqs last enabled at (790608): [] handle_softirqs+0xb1c/0xc90 [ 116.274756][ C1] softirqs last disabled at (790613): [] run_ksoftirqd+0x7c/0x2ac [ 116.276354][ C1] [ 116.276354][ C1] other info that might help us debug this: [ 116.277627][ C1] Possible unsafe locking scenario: [ 116.277627][ C1] [ 116.278819][ C1] CPU0 [ 116.279423][ C1] ---- [ 116.279943][ C1] lock(sk_lock-AF_X25); [ 116.280664][ C1] [ 116.281187][ C1] lock(sk_lock-AF_X25); [ 116.281959][ C1] [ 116.281959][ C1] *** DEADLOCK *** [ 116.281959][ C1] [ 116.283203][ C1] 1 lock held by ksoftirqd/1/21: [ 116.283930][ C1] #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 116.285528][ C1] [ 116.285528][ C1] stack backtrace: [ 116.286425][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 116.287580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 116.289176][ C1] Call trace: [ 116.289682][ C1] dump_backtrace+0x1c4/0x1f0 [ 116.290446][ C1] show_stack+0x2c/0x3c [ 116.291127][ C1] __dump_stack+0x30/0x40 [ 116.291826][ C1] dump_stack_lvl+0xf4/0x15c [ 116.292575][ C1] dump_stack+0x1c/0x5c [ 116.293264][ C1] print_usage_bug+0x4c0/0x6dc [ 116.294044][ C1] mark_lock_irq+0x858/0xab8 [ 116.294762][ C1] mark_lock+0x224/0x320 [ 116.295441][ C1] __lock_acquire+0xa88/0x6634 [ 116.296220][ C1] lock_acquire+0x20c/0x638 [ 116.296934][ C1] lock_sock_nested+0x70/0x130 [ 116.297700][ C1] x25_kill_by_neigh+0x94/0x138 [ 116.298437][ C1] x25_link_terminated+0x5c/0x78 [ 116.299216][ C1] x25_lapb_receive_frame+0x140/0xd0c [ 116.300156][ C1] netif_receive_skb_core+0x160/0x244 [ 116.301013][ C1] lapbeth_napi_poll+0x48/0xa0 [ 116.301755][ C1] __napi_poll+0xb8/0x3f4 [ 116.302448][ C1] net_rx_action+0x52c/0xb5c [ 116.303135][ C1] handle_softirqs+0x318/0xc90 [ 116.303876][ C1] run_ksoftirqd+0x7c/0x2ac [ 116.304614][ C1] smpboot_thread_fn+0x4e8/0x960 [ 116.305432][ C1] kthread+0x254/0x2e0 [ 116.306081][ C1] ret_from_fork+0x10/0x20 [ 116.306838][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3507 [ 116.308141][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 21, name: ksoftirqd/1 [ 116.309523][ C1] preempt_count: 100, expected: 0 [ 116.310268][ C1] RCU nest depth: 1, expected: 0 [ 116.311034][ C1] INFO: lockdep is turned off. [ 116.311771][ C1] Preemption disabled at: [ 116.311784][ C1] [] handle_softirqs+0xe8/0xc90 [ 116.313533][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 116.314679][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 116.316232][ C1] Call trace: [ 116.316733][ C1] dump_backtrace+0x1c4/0x1f0 [ 116.317478][ C1] show_stack+0x2c/0x3c [ 116.318152][ C1] __dump_stack+0x30/0x40 [ 116.318815][ C1] dump_stack_lvl+0xf4/0x15c [ 116.319554][ C1] dump_stack+0x1c/0x5c [ 116.320204][ C1] __might_resched+0x354/0x4e0 [ 116.320903][ C1] __might_sleep+0x94/0x110 [ 116.321597][ C1] lock_sock_nested+0x80/0x130 [ 116.322380][ C1] x25_kill_by_neigh+0x94/0x138 [ 116.323141][ C1] x25_link_terminated+0x5c/0x78 [ 116.323901][ C1] x25_lapb_receive_frame+0x140/0xd0c [ 116.324758][ C1] netif_receive_skb_core+0x160/0x244 [ 116.325634][ C1] lapbeth_napi_poll+0x48/0xa0 [ 116.326420][ C1] __napi_poll+0xb8/0x3f4 [ 116.327083][ C1] net_rx_action+0x52c/0xb5c [ 116.327816][ C1] handle_softirqs+0x318/0xc90 [ 116.328530][ C1] run_ksoftirqd+0x7c/0x2ac [ 116.329283][ C1] smpboot_thread_fn+0x4e8/0x960 [ 116.330059][ C1] kthread+0x254/0x2e0 [ 116.330738][ C1] ret_from_fork+0x10/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 116.662609][ T9] team0 (unregistering): Port device team_slave_1 removed [ 116.832598][ T9] team0 (unregistering): Port device team_slave_0 removed [ 117.012969][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.232790][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.633090][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 118.803361][ T9] bond0 (unregistering): Released all slaves [ 119.104342][ T5873] netlink: 'syz.2.344': attribute type 39 has an invalid length. [ 119.273101][ T5902] tipc: Resetting bearer [ 119.315338][ T5902] tipc: Disabling bearer [ 121.403942][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.405673][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.483262][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.484950][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.563066][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.564878][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.642979][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.644642][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.771788][ T9] netdevsim netdevsim100 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 121.773684][ T9] netdevsim netdevsim100 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 122.284266][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.344492][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.442874][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.533167][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.654304][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.724517][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.824474][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.942912][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.103545][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.192908][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.254541][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.313321][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.933588][ T9] tipc: Left network mode [ 125.242935][ T9] bond1: (slave ip6gretap1): Releasing backup interface [ 125.932596][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933713][ T2067] ieee802154 phy1 wpan1: encryption failed: -22